Approved changes feed: RSS · Atom

cpe:2.3:a:hive_support:hive_support:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHive Support (0fe3f01e-dbe2-596e-a35d-1514200ecb89)
ProductHive Support (ec128f7f-ccdd-51c5-82e6-68ca81f4b7a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32666 vulnerable 2026-06-08 07:19:00.382177 WordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Reflected XSS.This issue affects Hive Support: from n/a through <= 1.2.5.
Published: 2025-04-17T15:47:00.288Z
Updated: 2026-04-28T16:12:27.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32635 vulnerable 2026-06-08 07:19:00.344508 WordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerability
HIGH (7.5)
Insertion of Sensitive Information Into Sent Data vulnerability in Hive Support Hive Support hive-support allows Retrieve Embedded Sensitive Data.This issue affects Hive Support: from n/a through <= 1.2.6.
Published: 2025-04-17T15:47:10.668Z
Updated: 2026-04-28T16:12:25.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32242 vulnerable 2026-06-08 07:18:59.359555 WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hive Support: from n/a through <= 1.2.5.
Published: 2025-04-10T08:09:46.853Z
Updated: 2026-04-28T16:12:19.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32214 vulnerable 2026-06-08 07:18:59.315808 WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through <= 1.2.11.
Published: 2025-04-10T08:09:45.392Z
Updated: 2026-05-12T00:06:11.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32208 vulnerable 2026-06-08 07:18:59.308888 WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.2.5.
Published: 2025-04-10T08:09:44.425Z
Updated: 2026-04-28T16:12:19.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22298 vulnerable 2026-06-08 07:10:52.794964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54321 vulnerable 2026-06-08 06:54:16.357362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54304 vulnerable 2026-06-08 06:54:16.327597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52370 vulnerable 2026-06-08 06:52:15.018821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.