HireHive Job Plugin
HireHive Job Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for HireHive Job Plugin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by SOPROBRO. HireHive Job Plugin is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.0.
CVE-2025-22746HireHive Job Plugin <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
HireHive Job Plugin
Author
zartis
Prices start from $49 per month Hiring made easy Recruiting software that helps you find and hire the best candidates. Have your own jobs page directly in your WordPress site. Easily add and edit your job vacancies and securely manage candidates that apply for these jobs all in one online app. The HireHive Job Plugin lets you quickly and easily create your own jobs page and automate much of the recruitment process. Features Customize how your job page looks on your WordPress site All candidates profiles are stored in one central place. No more searching for email attachments! Post jobs to all major job boards with just one click Your very own branded careers site Easily tweet your job positions Easily put your jobs into Facebook When candidates apply for a role, you will receive a notification email and they receive an immediate acknowledgment. You can then log in to HireHive and view their application and manage them through the recruitment process. For more information see: https://hirehive.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C