{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/hivepress--1.7.32/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:hivepress:hivepress:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-110887"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["HivePress (\u003c= 1.7.32)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","web-application","cve","code-injection"],"_cs_type":"advisory","_cs_vendors":["HivePress"],"content_html":"\u003cp\u003eCVE-2026-110887 describes a severe improper control of generation of code vulnerability within the HivePress plugin for WordPress. This flaw, rated with a CVSS 3.1 base score of 9.9, enables unauthenticated remote code inclusion. The vulnerability exists in all versions of the HivePress plugin up to and including version 1.7.32. Because the plugin is a common component for WordPress-based directory and listing websites, successful exploitation allows an attacker to execute arbitrary PHP code on the underlying web server, potentially leading to full site compromise, exfiltration of database contents, or lateral movement within the hosting environment. Defenders should prioritize updating the HivePress plugin to the latest patched version to remediate this vector.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-110887 allows unauthenticated attackers to achieve remote code execution on WordPress instances running vulnerable versions of the HivePress plugin. This impact includes the potential for total loss of confidentiality, integrity, and availability of the web application, as well as the ability for attackers to establish persistent backdoors, install web shells, or conduct further malicious activities within the server infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately update the HivePress plugin to version 1.7.33 or higher to address CVE-2026-110887.\u003c/li\u003e\n\u003cli\u003eAudit web server access logs for anomalous POST requests to common WordPress plugin directories or parameter strings indicative of code injection attempts.\u003c/li\u003e\n\u003cli\u003eEnable Web Application Firewall (WAF) rules to detect and block common PHP code injection patterns or unusual inputs directed at WordPress site listing functionalities.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T12:03:14Z","date_published":"2026-10-19T12:03:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-hivepress-code-injection/","summary":"CVE-2026-110887 is a critical code injection vulnerability in the HivePress WordPress plugin that permits unauthenticated remote code inclusion.","title":"Code Injection Vulnerability in HivePress Plugin","url":"https://feed.craftedsignal.io/briefs/2026-10-hivepress-code-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - HivePress (\u003c= 1.7.32)","version":"https://jsonfeed.org/version/1.1"}