Hivepress
Products
2- 3 CVEs
- 1 CVE
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-18056 | Hig | 0.42 | 7.5 | 0.00 | Sep 6, 2026 | The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. This is due to the authenticate_user function's Facebook authenticator resolving third-party identity by… | ||
| CVE-2026-109193 | Hig | 0.40 | 7.2 | 0.00 | Oct 16, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input… | ||
| CVE-2026-107657 | Hig | 0.40 | 7.2 | 0.00 | Oct 10, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient… | ||
| CVE-2026-109388 | Med | 0.35 | 6.4 | 0.00 | Oct 16, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This… |
- risk 0.42cvss 7.5epss 0.00
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. This is due to the authenticate_user function's Facebook authenticator resolving third-party identity by…
- risk 0.40cvss 7.2epss 0.00
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input…
- risk 0.40cvss 7.2epss 0.00
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient…
- risk 0.35cvss 6.4epss 0.00
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This…