GiveWP vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GI

Product

GiveWP

by Nexcess · last CVE Oct 6, 2026

12

CVEs

0

On KEV

8.1

Max CVSS

5

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 5Medium 7Low 0

Severity

All severities12 Critical0 High5 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add GiveWP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-104405	8.1	0%	Oct 6	WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability Affected: through 4.17.0
CVE-2026-104672	7.1	0%	Oct 6	WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability Affected: through 4.17.0
CVE-2026-96830	7.1	0%	Sep 30	WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability Affected: through 4.16.9
CVE-2026-66690	7.1	0%	Aug 6	WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability Affected: through 4.16.5
CVE-2026-65441	7.1	0%	Jul 27	WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.16.3