Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PropertyHive — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting PropertyHive. AI-powered Chinese analysis, POCs, and references for each vulnerability.

PropertyHive is a WordPress plugin designed for real estate management, enabling property listings and agent functionality. Historically, it has faced multiple security vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. The plugin has accumulated 14 CVEs, with several critical issues allowing unauthorized access or complete system compromise. Notable characteristics include improper input validation and insufficient access controls in its core functionality. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities across multiple versions indicates ongoing security challenges that require immediate patching and careful implementation by users.

CVE ID Title CVSS Severity Published
CVE-2026-13357 Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter — Houzez Property Feed CWE-89 4.9 Medium 2026-07-02
CVE-2025-0808 Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion — Houzez Property Feed CWE-352 4.3 Medium 2025-02-12
CVE-2024-12465 Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting — Property Hive Stamp Duty Calculator CWE-79 6.4 Medium 2024-12-13
CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter — Property Hive Mortgage Calculator CWE-79 6.4 Medium 2024-12-10
CVE-2024-37204 WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability — PropertyHive CWE-862 4.3 Medium 2024-11-01
CVE-2024-8490 PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details — Property Hive CWE-352 8.8 High 2024-09-17
CVE-2024-35701 WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability — PropertyHive CWE-79 6.5 Medium 2024-06-08
CVE-2024-34381 WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability — PropertyHive CWE-79 6.5 Medium 2024-05-06
CVE-2024-3607 PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion — Property Hive CWE-862 4.3 Medium 2024-05-02
CVE-2024-29923 WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability — PropertyHive CWE-79 7.1 High 2024-03-27
CVE-2024-24718 WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability — PropertyHive CWE-862 4.3 Medium 2024-03-26
CVE-2024-27985 WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability — PropertyHive CWE-502 5.4 Medium 2024-03-21
CVE-2024-23513 WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection — PropertyHive CWE-502 8.7 High 2024-02-12
CVE-2023-22706 WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) — PropertyHive CWE-79 7.1 High 2023-05-15
CVE-2023-29172 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS) — PropertyHive CWE-79 7.1 High 2023-04-07

This page lists every published CVE security advisory associated with PropertyHive. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.