Skip to content
OpenAdvisories

Vendor

HivePress

11 known vulnerabilities.

Products

HivePress – Business Directory, Listings & Classified Ads Plugin 4 HivePress Claim Listings 3 HivePress 3 HivePress Authentication 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-109193

    HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value

    The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to i…

    HivePress HivePress – Business Directory, Listings & Classified Ads Plugin Web / CMS
  • High 7.2
    CVE-2026-107657

    HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form

    The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute field name, e.g. profile_test>' parameter in all versions up to, and including, 1.7.31 due t…

    HivePress HivePress – Business Directory, Listings & Classified Ads Plugin Web / CMS
  • High 7.5
    CVE-2026-18056

    HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator

    The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. This is due to the authenticate_user function's Facebook authenticator resolving third-party i…

    HivePress HivePress Authentication Web / CMS