CVE-2025-22298

Summary

CVE-2025-22298 represents a critical issue in Hive Support, a WordPress Help Desk plugin. The vulnerability stems from a missing authorization mechanism, enabling unauthorized access. Malicious actors can exploit incorrectly configured access control security levels, potentially leading to significant data breaches or unauthorized modifications. This security flaw affects Hive Support plugin versions from n/a to 1.1.6.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.