Log in Start free

PropertyHive

Products

ProductCVEsExploitedLatest
PropertyHive9–Nov 1, 2024
Houzez Property Feed2–Jul 2, 2026
Property Hive2–Sep 17, 2024
Property Hive Mortgage Calculator1–Dec 10, 2024
Property Hive Stamp Duty Calculator1–Dec 13, 2024

Exploited and recent CVEs

  • CVE-2026-13357 Medium 4.9 Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter 0.5%
  • CVE-2025-0808 Medium 4.3 Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion 0.2%
  • CVE-2024-12465 Medium 6.4 Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-11940 Medium 6.4 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter 0.4%
  • CVE-2024-37204 Medium 4.3 WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability 0.4%
  • CVE-2024-8490 High 8.8 PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details 0.4%
  • CVE-2024-35701 Medium 6.5 WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34381 Medium 6.5 WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-3607 Medium 4.3 PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion 0.6%
  • CVE-2024-29923 High 7.1 WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-24718 Medium 4.3 WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability 0.3%
  • CVE-2024-27985 Medium 5.4 WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2024-23513 High 8.7 WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection 0.5%
  • CVE-2023-22706 High 7.1 WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-29172 High 7.1 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS) 0.4%