Login Request a demo
GI
Product
GiveWP
by Liquid Web / StellarWP · last CVE Oct 9, 2026
9
CVEs
0
On KEV
10.0
Max CVSS
4
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 4Low 0
Severity
All severities9Critical2High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GiveWP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82222
10.0
2%
Aug 28
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
Affected: through 4.16.7.1
CVE-2026-97196
9.1
0%
Sep 30
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
Affected: through 4.16.9
CVE-2026-96333
7.5
0%
Oct 9
WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
Affected: through 4.16.8.1
CVE-2026-34900
7.1
0%
Jun 15
WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 4.14.2
CVE-2026-42678
7.1
0%
Jun 1
WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.14.5
CVE-2026-104404
6.5
0%
Oct 5
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.17.0
CVE-2025-66533
6.5
0%
Dec 9
WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability
Affected: through 4.13.1
CVE-2023-23672
5.4
0%
Jan 2
WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability
Affected: through 2.25.1
CVE-2026-106600
5.3
0%
Oct 8
WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
Affected: through 4.18.0
Showing 9