eHive Objects Image Grid

eHive Objects Image Grid has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for eHive Objects Image Grid has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. eHive Objects Image Grid is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all eHive Objects Image Grid vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-13662

eHive Objects Image Grid <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
eHive Objects Image Grid banner
Latestv2.4.2

eHive Objects Image Grid

Vernon Systems Limited

Author

Vernon Systems Limited

5.0(1)
100/100
Last Updated
2026-05-25 (4mo ago)
Active Installs
60+
Downloads
4,886
Requires WP
3.3.1+
Requires PHP
5.3+
Tested up to
WP 7.0.4
Created
2013-04-18 (14y ago)

This plugin is part of a suite of plugins created by Vernon Systems Ltd., which give you the power to embed eHive functionality into your WordPress website. This plugin allows you display a grid of images from eHive. The images can be filtered using a search term and some sort information. Alternatively, you can choose to display interesting, popular, or recently added images to eHive. You can choose to return only images from your account or community by configuring the “Site type” setting in the eHive Access plugin. Before you install this plugin you will need to install the eHive Access plugin. Get more from the eHive plugin suite To enhance the page you embed this plugin on you can also install the eHive Object details plugin to allow your users to click through to view the Object Records in detail. Other plugins in the suite include: eHive Account Details – A plugin for displaying eHive account information. eHive Object Comments – Enables users to add comments to Object Records from your site. eHive Object Details – A plugin for displaying Object Record detail pages. eHive Objects Tag Cloud – Displays a tag cloud from eHive. eHive Search – Allows you to search eHive. eHive Objects Gallery widget – Provides a gallery of Object Records that can be placed in your sites widget areas. eHive Objects Tag Cloud widget – Allows you to display a tag cloud in a widget area on your site. eHive Object Tags widget – A widget that displays tags for an Object Record. eHive Search widget – A widget plugin that provides an access to eHive Search from a widget.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C