Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HivePress — Vulnerabilities & Security Advisories 7

Browse all 7 CVE security advisories affecting HivePress. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE ID Title CVSS Severity Published
CVE-2026-109193 HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value — HivePress – Business Directory, Listings & Classified Ads Plugin CWE-79 7.2 High 2026-10-16
CVE-2026-109388 HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode — HivePress – Business Directory, Listings & Classified Ads Plugin CWE-79 6.4 Medium 2026-10-16
CVE-2026-107657 HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form — HivePress – Business Directory, Listings & Classified Ads Plugin CWE-79 7.2 High 2026-10-10
CVE-2026-103520 HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format — HivePress – Business Directory, Listings & Classified Ads Plugin CWE-79 6.4 Medium 2026-10-10
CVE-2026-18056 HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator — HivePress Authentication CWE-287 7.5 High 2026-09-06
CVE-2025-60123 WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability — HivePress Claim Listings CWE-862 4.3 Medium 2025-09-26
CVE-2025-60122 WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability — HivePress Claim Listings CWE-862 4.3 Medium 2025-09-26

This page lists every published CVE security advisory associated with HivePress. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.