| CVE-2026-116853 |
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions
|
6.5
Medium
|
Oct 30, 2026 |
| CVE-2026-104672 |
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions
|
7.1
High
|
Oct 6, 2026 |
| CVE-2026-104405 |
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions
|
8.1
High
|
Oct 6, 2026 |
| CVE-2026-97066 |
Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions
|
5.3
Medium
|
Sep 30, 2026 |
| CVE-2026-96834 |
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions
|
6.5
Medium
|
Sep 30, 2026 |
| CVE-2026-96830 |
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions
|
7.1
High
|
Sep 30, 2026 |
| CVE-2026-73352 |
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-73348 |
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-73357 |
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-73349 |
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions
|
5.3
Medium
|
Aug 13, 2026 |
| CVE-2026-66690 |
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions
|
7.1
High
|
Aug 6, 2026 |
| CVE-2026-65441 |
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions
|
7.1
High
|
Jul 27, 2026 |
| CVE-2026-65464 |
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions
|
5.4
Medium
|
Jul 23, 2026 |