Hive Support | AI-Powered Help Desk, Live Chat and Chatbot

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Hive Support | AI-Powered Help Desk, Live Chat and Chatbot

Information

Software Type Plugin
Software Slug hive-support (view on wordpress.org)
Software Status Active
Software Author hivesupport
Software Website gethivesupport.com
Software Downloads 10,176
Software Active Installs 40
Software Record Last Updated July 13, 2026

11 Vulnerabilities

Submit a Vulnerability
Hive Support <= 1.2.5 - Authenticated (Subscriber+) Missing Authorization via hs_update_ai_chat_settings and hive_lite_support_get_all_binbox
7.1
CVE-2025-5018
Jun 5, 2025
Researcher: Vo Thi Ngoc Nhi
Hive Support <= 1.2.5 - Cross-Site Request Forgery via hs_update_ai_chat_settings Function
5.4
CVE-2025-5019
Jun 5, 2025
Researcher: Vo Thi Ngoc Nhi
Hive Support <= 1.2.5 - Reflected Cross-Site Scripting
6.1
CVE-2025-32666
Apr 15, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Hive Support <= 1.2.6 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-32635
Apr 15, 2025
Researcher: stealthcopter
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2025-32214
Apr 8, 2025
Researcher: hunter85
Hive Support <= 1.2.5 - Missing Authorization
5.3
CVE-2025-32242
Apr 7, 2025
Researcher: stealthcopter
Hive Support <= 1.2.5 - Missing Authorization
4.3
CVE-2025-32208
Apr 7, 2025
Researcher: stealthcopter
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
4.3
CVE-2025-22298
Jan 6, 2025
Researcher: Dhabaleshwar Das
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2024-54304
Dec 11, 2024
Researcher: stealthcopter
Hive Support – WordPress Help Desk <= 1.1.2 - Cross-Site Request Forgery
4.3
CVE-2024-54321
Dec 11, 2024
Researcher: hunter85
Hive Support – WordPress Help Desk <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2024-52370
Nov 11, 2024
Researcher: stealthcopter
Title Status CVE ID CVSS Researchers Date
Hive Support <= 1.2.5 - Authenticated (Subscriber+) Missing Authorization via hs_update_ai_chat_settings and hive_lite_support_get_all_binbox Patched CVE-2025-5018 7.1 Vo Thi Ngoc Nhi June 5, 2025
Hive Support <= 1.2.5 - Cross-Site Request Forgery via hs_update_ai_chat_settings Function Patched CVE-2025-5019 5.4 Vo Thi Ngoc Nhi June 5, 2025
Hive Support <= 1.2.5 - Reflected Cross-Site Scripting Patched CVE-2025-32666 6.1 Trương Hữu Phúc (truonghuuphuc) April 15, 2025
Hive Support <= 1.2.6 - Unauthenticated Sensitive Information Exposure Patched CVE-2025-32635 5.3 stealthcopter April 15, 2025
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2025-32214 6.4 hunter85 April 8, 2025
Hive Support <= 1.2.5 - Missing Authorization Patched CVE-2025-32242 5.3 stealthcopter April 7, 2025
Hive Support <= 1.2.5 - Missing Authorization Patched CVE-2025-32208 4.3 stealthcopter April 7, 2025
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization Patched CVE-2025-22298 4.3 Dhabaleshwar Das January 6, 2025
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection Patched CVE-2024-54304 6.5 stealthcopter December 11, 2024
Hive Support – WordPress Help Desk <= 1.1.2 - Cross-Site Request Forgery Patched CVE-2024-54321 4.3 hunter85 December 11, 2024
Hive Support – WordPress Help Desk <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload Patched CVE-2024-52370 8.8 stealthcopter November 11, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation