CVE-2026-103520 | HivePress Plugin up to 1.7.31 on WordPress custom text attribute cross site scripting

October 10, 2026 Yanac

A vulnerability identified as problematic has been detected in HivePress Plugin up to 1.7.31 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument custom text attribute leads to cross site scripting.

This vulnerability is referenced as CVE-2026-103520. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More