Broken Access Control Vulnerability in Hive Support Plugin by WordPress

CVE-2025-32242

What is CVE-2025-32242?

The Hive Support plugin for WordPress contains a vulnerability due to improper access controls, allowing unauthorized users to access restricted functionalities. This flaw affects versions from n/a up to 1.2.2, creating potential security risks for users who may be exposed to unauthorized actions that should be governed by Access Control Lists (ACLs). It is essential for users to assess their vulnerability status and apply corrective measures promptly to safeguard their installations.

References