PropertyHive vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest PropertyHive vulnerabilities

CVE-2024-12585 — PropertyHive < 2.1.1 - Reflected XSS (CVSS 6.1)
CVE-2024-37204 — WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability (CVSS 4.3)
CVE-2024-8490 — PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details (CVSS 6.5)
CVE-2024-35701 — WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-34381 — WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-3607 — PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion (CVSS 4.3)
CVE-2024-27985 — WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability (CVSS 8.8)
CVE-2024-29923 — WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2024-24718 — WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability (CVSS 6.5)
CVE-2024-23513 — WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection (CVSS 9.8)
CVE-2023-22706 — WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
CVE-2023-29172 — WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
CVE-2018-6465 — (CVSS 6.1)