Code Injection Vulnerability in HivePress Plugin by HivePress
CVE-2026-110885

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Hivepress
Vendor
CVE Published:
18 October 2026

What is CVE-2026-110885?

The HivePress plugin is susceptible to an improper control of code generation, allowing attackers to exploit code injection vulnerabilities. This issue permits the execution of arbitrary code, which could compromise the integrity of affected sites. The vulnerability impacts versions of HivePress up to and including 1.7.32, necessitating immediate attention and potential remediation to ensure site security.

Affected Version(s)

HivePress 0 <= 1.7.32

References

https://patchstack.com/database/wordpress/plugin/hivepres...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

changsheng | Patchstack Bug Bounty Program
.