Skip to content

Known vulnerabilities in Liquid Web / StellarWP GiveWP

Is your version affected?

CVE Summary Score Published
CVE-2026-96333 Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This… 7.5 High Oct 9, 2026
CVE-2026-106600 Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured… 5.3 Medium Oct 8, 2026
CVE-2026-104404 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 6.5 Medium Oct 5, 2026
CVE-2026-97196 Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows… 9.1 Critical Sep 30, 2026
CVE-2026-82222 Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection 10.0 Critical Aug 28, 2026
CVE-2026-34900 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions 7.1 High Jun 15, 2026
CVE-2026-42678 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 7.1 High Jun 1, 2026
CVE-2025-66533 Improper Control of Generation of Code ('Code Injection') vulnerability in Liquid Web / StellarWP GiveWP give allows… 6.5 Medium Dec 9, 2025
CVE-2023-23672 Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1 5.4 Medium Jan 2, 2025

Other Liquid Web / StellarWP products