CVE-2026-110887 — WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability Most recent entries from cvelistv5 / 19min Affected: HivePress Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Seen : The vulnerability was mentioned, discussed, or observed by the user.

Confirmed : The vulnerability has been validated from an analyst's perspective.

Published Proof of Concept : A public proof of concept is available for this vulnerability.

Exploited : The vulnerability was observed as exploited by the user who reported the sighting.

Patched : The vulnerability was observed as successfully patched by the user who reported the sighting.

Not exploited : The vulnerability was not observed as exploited by the user who reported the sighting.

Not confirmed : The user expressed doubt the validity of the vulnerability.

Not patched : The vulnerability was not observed as successfully patched by the user who reported the sighting.

Sightings and recorded dates, grouped by day · UTC

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.