Unknown GiveWP vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 202611

Newest CVEs

• CVE-2026-111974

  GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency

  Unknown · GiveWP

  Medium5.3
• CVE-2026-111981

  GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses

  Unknown · GiveWP

  Low2.7
• CVE-2026-111980

  GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant

  Unknown · GiveWP

  Medium5.5
• CVE-2026-111979

  GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color

  Unknown · GiveWP

  Medium6.8
• CVE-2026-111978

  GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import

  Unknown · GiveWP

  Medium6.0
• CVE-2026-111976

  GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route

  Unknown · GiveWP

  Medium5.3
• CVE-2026-85113

  GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name

  Unknown · GiveWP

  Medium6.5
• CVE-2026-85530

  GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch

  Unknown · GiveWP

  High8.1
• CVE-2026-14319

  GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure

  Unknown · GiveWP

  High7.5
• CVE-2026-14317

  GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass

  Unknown · GiveWP

  Medium5.3