CVE-2026-34900 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
GiveWP 4.14	earliest → 4.14.2	No fix stated

Other CVEs of GiveWP

The 9 CVEs of GiveWP →

CVE-2026-96333 Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This… 7.5 High CVE-2026-106600 Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured… 5.3 Medium CVE-2026-104404 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 6.5 Medium CVE-2026-97196 Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows… 9.1 Critical