Skip to content
Threat Feed
Subscribe

Vendor

HivePress

4 briefs RSS
critical advisory

Code Injection Vulnerability in HivePress Plugin

CVE-2026-110887 is a critical code injection vulnerability in the HivePress WordPress plugin that permits unauthenticated remote code inclusion.

HivePress wordpress web-application cve code-injection
2t 1c
high advisory

Stored Cross-Site Scripting in HivePress WordPress Plugin

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in HivePress plugin versions 1.7.32 and earlier allows attackers to inject malicious scripts into attribute fields.

HivePress – Business Directory, Listings & Classified Ads Plugin wordpress xss web-application
1t 1c
high advisory

Stored XSS in HivePress WordPress Plugin

The HivePress WordPress plugin for versions 1.7.31 and below contains a stored Cross-Site Scripting (XSS) vulnerability that allows unauthenticated attackers to execute arbitrary scripts in the context of user profiles.

HivePress web-application xss wordpress
1t 1c
high advisory

Authentication Bypass in HivePress Authentication Plugin

The HivePress Authentication plugin for WordPress through version 1.1.4 is vulnerable to authentication bypass via improper validation of Facebook OAuth tokens, allowing unauthenticated attackers to impersonate arbitrary users.

HivePress Authentication web-application authentication-bypass wordpress cve-2026-18056
1t 1c