Plugin icon

Property Hive

propertyhive

Vulnerabilities:

18

Last Updated:

April 20, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2025-11-24
Title
PropertyHive < 2.1.13 - Missing Authorization
Fixed in
Fixed in 2.1.13
CVSS
5.3 (medium)
Published
2025-11-24
Title
PropertyHive < 2.1.13 - Missing Authorization
Fixed in
Fixed in 2.1.13
CVSS
4.3 (medium)
Published
2025-09-03
Title
PropertyHive < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.6
CVSS
6.4 (medium)
Published
2025-04-16
Title
PropertyHive < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.3
CVSS
6.4 (medium)
Published
2024-12-18
Title
PropertyHive < 2.1.1 - Reflected XSS
Fixed in
Fixed in 2.1.1
CVSS
7.1 (high)
Published
2024-09-16
Title
PropertyHive < 2.0.20 - Cross-Site Request Forgery via save_account_details
Fixed in
Fixed in 2.0.20
CVSS
8.8 (high)
Published
2024-06-20
Title
PropertyHive < 2.0.10 - Missing Authorization
Fixed in
Fixed in 2.0.10
CVSS
4.3 (medium)
Published
2024-06-06
Title
PropertyHive < 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.14
CVSS
6.4 (medium)
Published
2024-05-03
Title
PropertyHive < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.11
CVSS
6.4 (medium)
Published
2024-04-24
Title
PropertyHive < 2.0.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Fixed in
Fixed in 2.0.13
CVSS
4.3 (medium)
Published
2024-03-25
Title
PropertyHive < 2.0.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.0.9
CVSS
6.1 (medium)
Published
2024-03-13
Title
PropertyHive < 2.0.10 - Authenticated (Subscriber+) PHP Object Injection
Fixed in
Fixed in 2.0.10
CVSS
8.8 (high)
Published
2024-01-31
Title
PropertyHive < 2.0.7 - Missing Authorization via activate_pro_feature
Fixed in
Fixed in 2.0.7
CVSS
5.3 (medium)
Published
2024-01-30
Title
PropertyHive < 2.0.6 - Unauthenticated PHP Object Injection via propertyhive_currency
Fixed in
Fixed in 2.0.6
CVSS
8.1 (high)
Published
2023-04-19
Title
PropertyHive <= 1.5.48 - Reflected XSS
Fixed in
Fixed in 1.5.49
CVSS
7.1 (high)
Published
2023-04-03
Title
PropertyHive < 1.5.47 - Reflected XSS
Fixed in
Fixed in 1.5.47
CVSS
7.5 (high)
Published
2018-12-03
Title
PropertyHive <= 1.4.25 - Unvalidated Input to do_action()
Fixed in
Fixed in 1.4.26
CVSS
n/a
Published
2018-01-31
Title
PropertyHive <= 1.4.14 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4.15
CVSS
6.1 (medium)