GI
Product
GiveWP
12
CVEs
0
On KEV
8.1
Max CVSS
6
New 30D
Severity mix
Critical 0High 2Medium 9Low 1
Watch
Add GiveWP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85530 | 8.1 | Sep 16 | GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch Affected: 4.16.6 before 4.16.8.1 |
| CVE-2026-14319 | 7.5 | Jul 31 | GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure Affected: before 4.16.3 |
| CVE-2026-111979 New | 6.8 | Oct 25 | GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color Affected: before 4.19.0.1 |
| CVE-2026-14318 | 6.8 | Jul 30 | GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings Affected: before 4.16.3 |
| CVE-2026-85113 | 6.5 | Sep 21 | GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name Affected: 4.13.2 before 4.16.9 |
| CVE-2026-111978 New | 6.0 | Oct 25 | GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import Affected: before 4.19.0.1 |
| CVE-2026-111980 New | 5.5 | Oct 25 | GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant Affected: before 4.19.0.1 |
| CVE-2026-111974 New | 5.3 | Oct 26 | GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency Affected: before 4.19.0.1 |
| CVE-2026-111976 New | 5.3 | Oct 25 | GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route Affected: before 4.19.0.1 |
| CVE-2026-14317 | 5.3 | Jul 31 | GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass Affected: before 4.16.3 |
| CVE-2024-11921 | 4.8 | Dec 27 | Give < 3.19.0 - Reflected XSS Affected: before 3.19.0 |
| CVE-2026-111981 New | 2.7 | Oct 25 | GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses Affected: before 4.19.0.1 |
Showing 12