Live › vulnerability › CVE-2026-110885
Go to dashboardHivePress is a WordPress plugin for building marketplace and classified-ads sites. A code injection flaw in versions through 1.7.32 may let an attacker inject code that the plugin then executes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the HivePress plugin at version or earlier are in scope. The sources do not say which features or configurations trigger the flaw, so unknown whether sites without the affected feature are safe.
1.7.32No product ranges from the sources yet.
wp plugin get hivepress --field=version1.7.32, as the sources do not name a patched releaseEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32.
This page as .md · .json · in your agent: get_signal("CVE-2026-110885")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.