cve.nowby Sazabi
← All vulnerabilities
CVE-2026-110887

WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.

Affected versions

  • hivepress

    through 1.7.32

References 1

patchstack.com