Advisories · Technology
HivePress – Business Directory, Listings & Classified Ads Plugin.
Every CVE that names HivePress – Business Directory, Listings & Classified Ads Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
- HivePress – Business Directory, Listings & Classified Ads Plugin
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode
- HivePress – Business Directory, Listings & Classified Ads Plugin
- Cross-site scripting (XSS)
- CVSS 7.2 High
HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form
- HivePress – Business Directory, Listings & Classified Ads Plugin
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format
- HivePress – Business Directory, Listings & Classified Ads Plugin
- Cross-site scripting (XSS)