Medium
CVE-2026-66578
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
High
CVE-2026-57381
Property Hive <= 2.2.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42729
Property Hive <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-66087
PropertyHive <= 2.1.12 - Missing Authorization
Medium
CVE-2025-66088
PropertyHive <= 2.1.12 - Missing Authorization
Medium
CVE-2025-58612
PropertyHive <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39577
PropertyHive <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12585
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-8490
PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details
Medium
CVE-2024-37204
PropertyHive <= 2.0.9 - Missing Authorization
Medium
CVE-2024-35701
PropertyHive <= 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34381
PropertyHive <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3607
PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-29923
PropertyHive <= 2.0.8 - Reflected Cross-Site Scripting
High
CVE-2024-27985
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-24718
PropertyHive <= 2.0.6 - Missing Authorization via activate_pro_feature
High
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Medium
CVE-2023-22706
PropertyHive <= 1.5.48 - Reflected Cross-Site Scripting via date_post_id
Medium
CVE-2023-29172
PropertyHive <= 1.5.46 - Reflected Cross-Site Scripting via 'merge_ids'
Critical
02bb12db-0bc9-4c13-918f-1f90b500c165
PropertyHive < 1.4.26 - Remote Code Execution
Medium
CVE-2018-6465
PropertyHive < 1.4.15 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.