Plugin icon

HivePress – Business Directory, Listings & Classified Ads Plugin

hivepress

Vulnerabilities:

4

Last Updated:

October 14, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
HivePress < 1.8.0 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
Fixed in
Fixed in 1.8.0
CVSS
7.2 (high)
Published
2026-10-15
Title
HivePress < 1.8.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode
Fixed in
Fixed in 1.8.0
CVSS
6.4 (medium)
Published
2026-10-09
Title
HivePress < 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form
Fixed in
Fixed in 1.7.32
CVSS
7.2 (high)
Published
2026-10-09
Title
HivePress < 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format
Fixed in
Fixed in 1.7.32
CVSS
6.4 (medium)