Skip to content
OpenAdvisories

Vendor

Property Hive

24 known vulnerabilities.

Products

PropertyHive 16 Houzez Property Feed 4 Property Hive 2 Property Hive Stamp Duty Calculator 1 Property Hive Mortgage Calculator 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2026-65560

    WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.

    Property Hive Houzez Property Feed
  • High 7.1
    CVE-2026-57381

    WordPress PropertyHive plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.3.

    Property Hive PropertyHive
  • High 7.1
    CVE-2026-42729

    WordPress PropertyHive plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows DOM-Based XSS.This issue affects PropertyHive: from n/a through <= 2.2.2.

    Property Hive PropertyHive
  • High 7.5
    CVE-2025-66088

    WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through <= 2.1.12.

    Property Hive PropertyHive
  • High 7.5
    CVE-2025-30793

    WordPress Houzez Property Feed plugin <= 2.5.4 - Arbitrary File Download Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Property Hive Houzez Property Feed houzez-property-feed allows Path Traversal.This issue affects Houzez Property Feed: from n/a through <= 2.5.4.

    Property Hive Houzez Property Feed
  • High 8.8
    CVE-2024-8490

    PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details

    The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.19. This is due to missing or incorrect nonce validation on the 'save_account_details' function. This makes it possible for unauthentic…

    Property Hive Property Hive Web / CMS
  • High 7.1
    CVE-2024-29923

    WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PropertyHive allows Reflected XSS.This issue affects PropertyHive: from n/a through 2.0.8.

    Property Hive PropertyHive
  • High 8.7
    CVE-2024-23513

    WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.5.

    Property Hive PropertyHive
  • High 7.1
    CVE-2023-22706

    WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.48 versions.

    Property Hive PropertyHive
  • High 7.1
    CVE-2023-29172

    WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.46 versions.

    Property Hive PropertyHive