eHive Search

eHive Search has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for eHive Search has a vendor fix available, so running the current release closes it.

All of these findings were reported by Skalucy. eHive Search is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all eHive Search vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-67930

eHive Search <= 2.5.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
eHive Search banner
Latestv2.5.1
5.0(1)
100/100
Last Updated
2026-05-25 (4mo ago)
Active Installs
60+
Downloads
5,434
Requires WP
3.3.1+
Requires PHP
8.2+
Tested up to
WP 7.0.4
Created
2013-04-16 (14y ago)

This plugin is part of a suite of plugins created by Vernon Systems Ltd., which give you the power to embed eHive functionality into your WordPress website. This plugin gives you the ability to add eHive search functionality to your website. When added to your site the eHive Search plugin allows your site’s visitors to search for eHive Objects. Search results can be displayed as a list view, lightbox view or both. You can optionally add an account and/or community filter in the eHive Access plugin’s options page so that your site returns Object Records from the given account and/or community only. You can configure the search options to display your choice of fields for the search results summary. Before you install this plugin you will need to install the eHive Access plugin. Get more from the eHive plugin suite To enhance the experience you offer your users you can also install the eHive Object details plugin to allow your users to click all the way through to view the Object Records in detail. Furthermore, you can add the eHive Search widget and give your visitors the option to search eHive on every page, not just the page where you have added the plugin’s shortcode. While eHive search will function and return results without the eHive Object Details plugin, it is likely that you will want to install the eHive Object Details plugin so your users can click through and view an Object Record in detail. Other plugins in the suite include: eHive Account Details – A plugin for displaying eHive account information. eHive Object Comments – Enables users to add comments to Object Records from your site. eHive Object Details – A plugin for displaying Object Record detail pages. eHive Objects Image Grid – Displays a grid of images from eHive filtered by certain criteria. eHive Objects Tag Cloud – Displays a tag cloud from eHive. eHive Objects Gallery widget – Provides a gallery of Object Records that can be placed in your sites widget areas. eHive Object Tags widget – A widget that displays tags for an Object Record. eHive Objects Tag Cloud widget – Allows you to display a tag cloud in a widget area on your site. eHive Search widget – A widget plugin that provides access to eHive Search from a widget.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C