Advisories · Technology

HivePress.

Every CVE that names HivePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123470 CVE record

CVSS 4.3 Medium

WordPress HivePress plugin <= 1.8.1 - Broken Access Control vulnerability
- HivePress
- Broken access control
Not analysed yet 7 Nov 2026
CVE-2026-110887 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability
- HivePress
- Code injection
Not analysed yet 19 Oct 2026
CVE-2026-110885 CVE record

CVSS 6.5 Medium

WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability
- HivePress
- Code injection
Not analysed yet 18 Oct 2026