PatchTheCVEpropertyhive vulnerabilities and fixes
Recent CVEs affecting propertyhive, with upgrade or downgrade steps. 10 tracked.
propertyhive has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-01-08. Highest priority: CVE-2024-23513 (score 46/100).
- CVE-2024-8490 HIGH 8.8 UPGRADE The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i
- CVE-2024-3607 MEDIUM 4.3 UPGRADE The PropertyHive plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability c
- CVE-2024-37204 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in PropertyHive PropertyHive allows Exploiting Incorrectly Configured Acce
- CVE-2024-35701 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in P
- CVE-2024-34381 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property
- CVE-2024-29923 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property
- CVE-2024-27985 MEDIUM 5.4 UPGRADE Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a thro
- CVE-2024-24718 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6.
- CVE-2024-23513 HIGH 8.7 UPGRADE Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a thro
- CVE-2024-12585 MEDIUM 6.1 UPGRADE The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it
FAQ
How do I fix propertyhive vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is propertyhive being exploited right now?
None of the tracked propertyhive CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which propertyhive CVE should I patch first?
CVE-2024-23513 currently ranks highest (46/100): Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a thro.