CVE-2026-42707: WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges. It can be exploited remotely without user interaction.

Q: What is the expected impact if the issue is exploited?

The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied severity vector.

Q: Which plugin versions are affected?

HivePress Claim Listings versions through 1.1.4 are affected. The provided data does not identify a fixed version.

Published Oct 29, 2026

Updated

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through 1.1.4.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress HivePress Claim Listings to a version that resolves this vulnerability.
Fixed in 1.1.5

Event History

Oct 29, 2026

CVE Published

via MITRE·01:07 PM

Data Sourced

via MITRE·01:07 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges. It can be exploited remotely without user interaction.

What is the expected impact if the issue is exploited?

The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied severity vector.

Which plugin versions are affected?

HivePress Claim Listings versions through 1.1.4 are affected. The provided data does not identify a fixed version.

CVE-2026-42707: WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if the issue is exploited?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if the issue is exploited?

Which plugin versions are affected?