CVE-2025-32242: falha de média gravidade em Hive Support
WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hive Support: from n/a through <= 1.2.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
Hive Support · Hive SupportCVEs relacionadas — Hive Support
No mesmo produto, das mais perigosas para as menos.
CVE-2024-54304HIGHWordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerabilityEPSS 0.5%CVE-2024-52370CRITICALWordPress Hive Support – WordPress Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin <= 1.1.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-32635HIGHWordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2025-32208MEDIUMWordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-22298MEDIUMWordPress Hive Support plugin <= 1.1.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-32666HIGHWordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%