Liquidweb Give Tributes vulnerabilities

• liquidweb give tributes Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter CVE-2026-19658 Public exploit 9.8 CriticalSeptember 22, 2026