Live › vulnerability › CVE-2026-42707
HivePress Claim Listings is a WordPress plugin for claiming business listings. A missing authorization check lets an attacker reach functions their role should not allow, due to incorrectly configured access control.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 14:25 UTC. All times on this page are UTC.
Sites running the HivePress Claim Listings WordPress plugin at version 1.1.4 or earlier. The flaw is an access control issue, so exposure depends on which roles and endpoints the site exposes; sites without the plugin are not affected.
No product ranges from the sources yet.
wp-content/plugins/hivepress-claim-listings/.1.1.4 or earlier.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through 1.1.4.
This page as .md · .json · in your agent: get_signal("CVE-2026-42707")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.