CVE-2026-110887
CVE-2026-110887 · WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.
CVSS 9.9 · Critical · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
hivepress
- Versions
- ≥ 0, ≤ 1.7.32: Affected; ≥ 1.8.0: Not affected (custom)
Update to 1.8.0