Skip to content
Stellarwp Givewp vulnerabilities
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter
CVE-2026-118193
8.8 High
-
nexcess givewp
WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability
CVE-2026-116853
6.5 Medium
-
stellarwp givewp
GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency
CVE-2026-111974
5.3 Medium
-
stellarwp givewp
GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses
CVE-2026-111981
2.7 Low
-
stellarwp givewp
GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
CVE-2026-111980
5.5 Medium
-
stellarwp givewp
GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color
CVE-2026-111979
6.8 Medium
-
stellarwp givewp
GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import
CVE-2026-111978
6.0 Medium
-
stellarwp givewp
GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route
CVE-2026-111976
5.3 Medium
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes
CVE-2026-97643
6.4 Medium
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
CVE-2026-96333
7.5 High
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
CVE-2026-106600
5.3 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104672
7.1 High
-
nexcess givewp
WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
CVE-2026-104405
8.1 High
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104404
6.5 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-97066
5.3 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
CVE-2026-96834
6.5 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96830
7.1 High
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
CVE-2026-97196
9.1 Critical
-
stellarwp givewp
GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name
CVE-2026-85113
6.5 Medium
-
stellarwp givewp
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
CVE-2026-85530
8.1 High
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-82222
Public exploit
10.0 Critical
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-5510
6.4 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
CVE-2026-73352
6.5 Medium
-
nexcess givewp
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
CVE-2026-73348
6.5 Medium
-
nexcess givewp
WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73357
6.5 Medium
-
nexcess givewp
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
CVE-2026-73349
5.3 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66690
7.1 High
-
stellarwp givewp
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
CVE-2026-14319
7.5 High
-
stellarwp givewp
GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass
CVE-2026-14317
5.3 Medium
-
stellarwp givewp
GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
CVE-2026-14318
6.8 Medium
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65441
7.1 High
-
nexcess givewp
WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65464
5.4 Medium
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting
CVE-2026-14987
6.4 Medium
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form
CVE-2026-13704
6.4 Medium
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.15.3 - Cross-Site Request Forgery
CVE-2026-11981
4.3 Medium
-
stellarwp givewp – donation plugin and fundraising platform
GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute
CVE-2026-13246
6.4 Medium
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-34900
7.1 High
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42678
7.1 High
-
stellarwp givewp
WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability
CVE-2026-42642
5.3 Medium
-
stellarwp givewp
WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67467
5.4 Medium
-
liquid web / stellarwp givewp
WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability
CVE-2025-66533
6.5 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'
CVE-2025-13206
7.2 High
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association
CVE-2025-11228
5.3 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure
CVE-2025-11227
6.5 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update
CVE-2025-7221
4.3 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
CVE-2025-8620
5.3 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting
CVE-2025-7205
5.4 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification
CVE-2025-4571
5.4 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure
CVE-2025-2331
5.3 Medium
-
givewp, stellarwp givewp – donation plugin and fundraising platform +1 more
Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function
CVE-2025-2025
6.5 Medium
- Show olderLoading…