hivesec

2026

Critical

High

Medium

Low

Global Rank

#341

of 3,238 researchers

Vulns

13

Critical0

High3

Medium10

Low0

Affected Assets

12

12plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

12 records


2026-06-29 00:00	POS Entegratör – Gurmehub Ödeme Eklentisi <= 3.7.103 - Missing Authorization POS Entegratör <= 3.7.103	`CVE-2026-57688`	5.3 Medium	hivesec	Yes
2026-06-24 00:00	Quick Interest Slider <= 3.1.6 - Reflected Cross-Site Scripting Quick Interest Slider <= 3.1.6	`CVE-2026-56039`	6.1 Medium	hivesec	Yes
2026-06-24 00:00	Gutenverse Form – Contact Form Builder, Block Form & Booking Form <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting Gutenverse Form <= 2.4.7	`CVE-2026-56040`	7.2 High	hivesec	Yes
2026-06-17 00:00	Nexi XPay <= 8.3.1 - Missing Authorization Nexi XPay <= 8.3.1	`CVE-2026-54810`	5.3 Medium	hivesec	Yes
2026-04-21 00:00	Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 - Reflected Cross-Site Scripting Min Max Step Quantity Limits Manager fo… <= 5.2.2	`CVE-2026-39437`	6.1 Medium	hivesec	Yes
2026-04-20 00:00	WP Sessions Time Monitoring Full Automatic <= 1.1.4 - Authenticated (Subscriber+) SQL Injection WP Sessions Time Monitoring Full Automa… <= 1.1.4	`CVE-2026-39581`	6.5 Medium	hivesec	Yes
2026-04-20 00:00	InPost Gallery <= 2.1.4.6 - Unauthenticated SQL Injection InPost Gallery <= 2.1.4.6	`CVE-2026-39574`	7.5 High	hivesec	Yes
2026-04-20 00:00	Jupiter X Core <= 4.14.1 - Missing Authorization Jupiter X Core <= 4.14.1	`CVE-2026-39490`	5.3 Medium	hivesec	Yes
2026-03-26 00:00	Seriously Simple Podcasting <= 3.14.2 - Missing Authorization Seriously Simple Podcasting <= 3.14.2	`CVE-2026-39505`	5.3 Medium	hivesec	Yes
2026-03-20 00:00	Product Rearrange for WooCommerce <= 1.2.2 - Unauthenticated SQL Injection Product Rearrange for WooCommerce <= 1.2.2	`CVE-2026-31920`	7.5 High	hivesec	No

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C