GiveWP vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GI

Product

GiveWP

by Nexcess · last CVE Oct 6, 2026

12

CVEs

0

On KEV

8.1

Max CVSS

5

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 5Medium 7Low 0

Severity

All severities12 Critical0 High5 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add GiveWP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-96834	6.5	0%	Sep 30	WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability Affected: through 4.16.9
CVE-2026-73352	6.5	0%	Aug 18	WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability Affected: through 4.16.5.1
CVE-2026-73348	6.5	0%	Aug 18	WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability Affected: before 4.16.6
CVE-2026-73357	6.5	0%	Aug 13	WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability Affected: before 4.16.6
CVE-2026-65464	5.4	0%	Jul 23	WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.16.3
CVE-2026-97066	5.3	0%	Sep 30	WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability Affected: through 4.16.9
CVE-2026-73349	5.3	0%	Aug 13	WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability Affected: before 4.16.6