CVE-2026-34900 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
GiveWP 4.14	premières → 4.14.2	Pas de correctif indiqué

Autres CVE de GiveWP

Les 9 CVE de GiveWP →

CVE-2026-96333 Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This… 7.5 Élevée CVE-2026-106600 Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured… 5.3 Moyenne CVE-2026-104404 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 6.5 Moyenne CVE-2026-97196 Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows… 9.1 Critique