HivePress – Business Directory, Listings & Classified Ads Plugin vulnerabilities

2 known vulnerabilities in HivePress – Business Directory, Listings & Classified Ads Plugin from HivePress. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  HivePress – Business Directory, Listings &…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-109193Oct 16, 2026HivePress

  The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to in

• 7.2 High severity

  HivePress – Business Directory, Listings &…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-107657Oct 10, 2026HivePress

  The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute field name, e.g. profile_test>' parameter in all versions up to, and including, 1.7.31 due to