CRITICAL 9.9 NVD

CVE-2026-110887

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePre

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.

References

https://patchstack.com/database/wordpress/plugin/hivepress/vulnerability/wordpress-hivepre

Published: 2026-10-19 · Source: NVD · Feed updated: 2026-10-19

This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-10-19 via NVD.

Risk Timeline

CVE Disclosed2026-10-19 · -1 days ago

Remediation Resources

Official Advisory

patchstack.com/database/wordpress/plugin/hivepress/vulnerability/wordp

vulnfeed aggregates 17437 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.