Live › vulnerability › CVE-2026-110887
Go to dashboardHivePress, a WordPress plugin, has a code injection flaw that lets remote code be included and run. An attacker can likely run code on the affected WordPress site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed HivePress plugin version in the WordPress admin plugins page; versions through 1.7.32 are affected.
Update HivePress to a version later than 1.7.32; the patched version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.
This page as .md · .json · in your agent: get_signal("CVE-2026-110887")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.