951 matches found
CVE-2025-32242 WordPress Hive Support plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Hive Support Hive Support allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Hive Support: from n/a through 1.2.2...
CVE-2025-32214 WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through = 1.2.11...
CVE-2025-32214 WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through = 1.2.11...
CVE-2025-32214
CVE-2025-32214 concerns the WordPress plugin Hive Support (Hive Support – AI-Powered Help Desk, Live Chat & AI Chat Bot). The vulnerability is a Stored Cross-Site Scripting (XSS) affecting versions up to and including 1.2.2, arising from improper input handling during web page generation. Public ...
CVE-2025-32208
CVE-2025-32208 (Hive Support WordPress plugin) is supported by connected documents as a real vulnerability, not a placeholder. The Hive Support plugin (WordPress) is affected by a missing authorization/capability check in functions hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox...
CVE-2025-32208 WordPress Hive Support plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Hive Support Hive Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hive Support: from n/a through 1.2.2...
CVE-2025-32208 WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through = 1.2.5...
PT-2025-15956 · Unknown · Hive Support
Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For Hive Support versions 1.2.2 and...
WordPress plugin Hive Support 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Hive Support 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-15942 · Unknown · Hive Support
Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For Hive Support versions...
WordPress plugin Hive Support 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by stealthcopter in WordPress Plugin Hive Support versions = 1.2.5...
CVE-2024-45199
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code executi...
CVE-2025-30793
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Property Hive Houzez Property Feed houzez-property-feed allows Path Traversal.This issue affects Houzez Property Feed: from n/a through = 2.5.4...
CVE-2024-45199
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code executi...
insightsoftware Hive JDBC 安全漏洞
insightsoftware Hive JDBC is a high performance JDBC driver from insightsoftware. It supports Hive access to multiple databases. A security vulnerability exists in insightsoftware Hive JDBC version 2.6.13 and earlier, which stems from malicious parameter injection that could lead to remote code...
CVE-2024-45199
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code executi...
CVE-2024-45199
CVE-2024-45199 - summary from provided documents : The issue affects insightsoftware Hive JDBC driver up to version 2.6.13. A remote code execution vulnerability arises when attackers inject malicious parameters into the JDBC URL, triggering a JNDI injection during the connection process with the...
CVE-2025-30793
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Property Hive Houzez Property Feed houzez-property-feed allows Path Traversal.This issue affects Houzez Property Feed: from n/a through = 2.5.4...