{"data":{"id":"ec1b1391-3eae-4875-945b-4609515a0949","title":"CVE-2025-5018: The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing…","summary":"The Hive Support plugin for WordPress, up to and including version 1.2.4, lacks a capability check on the hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox() functions. Authenticated attackers with Subscriber-level access or above can read and overwrite the site's OpenAI API key and inspection data, or modify AI-chat prompts and behavior. The source notes this may be a duplicate of CVE-2025-32208 or CVE-2025-32242.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-5018","publishedAt":"2025-06-06T11:15:27.970Z","cveId":"CVE-2025-5018","cweIds":["CWE-862"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Hive Support plugin for WordPress","OpenAI API key","AI-chat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Hive Support plugin for WordPress missing capability check on AI chat settings","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00337,"epssCheckedAt":"2026-11-04T00:12:27.299Z","kevDateAdded":null,"advisoryAliases":["GHSA-3hw7-239v-hfv6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:34.761Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}