Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

propertyhive — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting propertyhive. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2025-0808 Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion — Houzez Property FeedCWE-352 4.3 Medium2025-02-12
CVE-2024-12465 Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting — Property Hive Stamp Duty CalculatorCWE-79 6.4 Medium2024-12-13
CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter — Property Hive Mortgage CalculatorCWE-79 6.4 Medium2024-12-10
CVE-2024-37204 WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability — PropertyHiveCWE-862 4.3 Medium2024-11-01
CVE-2024-8490 PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details — Property HiveCWE-352 8.8 High2024-09-17
CVE-2024-35701 WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability — PropertyHiveCWE-79 6.5 Medium2024-06-08
CVE-2024-34381 WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability — PropertyHiveCWE-79 6.5 Medium2024-05-06
CVE-2024-3607 PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion — Property HiveCWE-862 4.3 Medium2024-05-02
CVE-2024-29923 WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability — PropertyHiveCWE-79 7.1 High2024-03-27
CVE-2024-24718 WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability — PropertyHiveCWE-862 4.3 Medium2024-03-26
CVE-2024-27985 WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability — PropertyHiveCWE-502 5.4 Medium2024-03-21
CVE-2024-23513 WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection — PropertyHiveCWE-502 8.7 High2024-02-12
CVE-2023-22706 WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) — PropertyHiveCWE-79 7.1 High2023-05-15
CVE-2023-29172 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS) — PropertyHiveCWE-79 7.1 High2023-04-07

This page lists every published CVE security advisory associated with propertyhive. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.