Nexcess Givewp vulnerabilities

• nexcess givewp WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability CVE-2026-116853 6.5 MediumOctober 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-104672 7.1 HighOctober 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability CVE-2026-104405 8.1 HighOctober 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97066 5.3 MediumSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability CVE-2026-96834 6.5 MediumSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-96830 7.1 HighSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability CVE-2026-73352 6.5 MediumAugust 18, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability CVE-2026-73348 6.5 MediumAugust 18, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-73357 6.5 MediumAugust 13, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability CVE-2026-73349 5.3 MediumAugust 13, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-66690 7.1 HighAugust 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-65441 7.1 HighJuly 27, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-65464 5.4 MediumJuly 23, 2026