propertyhive vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 202411
3. 20251
4. 20261

Newest CVEs

• CVE-2026-13357

  Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

  propertyhive · Houzez Property Feed

  Medium4.9
• CVE-2025-0808

  Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion

  propertyhive · Houzez Property Feed

  Medium4.3
• CVE-2024-12465

  Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting

  propertyhive · Property Hive Stamp Duty Calculator

  Medium6.4
• CVE-2024-11940

  Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter

  propertyhive · Property Hive Mortgage Calculator

  Medium6.4
• CVE-2024-37204

  WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability

  PropertyHive · PropertyHive

  Medium4.3
• CVE-2024-8490

  PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details

  propertyhive · Property Hive

  High8.8
• CVE-2024-35701

  WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability

  PropertyHive · PropertyHive

  Medium6.5
• CVE-2024-34381

  WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

  PropertyHive · PropertyHive

  Medium6.5
• CVE-2024-3607

  PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

  propertyhive · Property Hive

  Medium4.3
• CVE-2024-29923

  WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

  PropertyHive · PropertyHive

  High7.1