Unknown Givewp vulnerabilities

• stellarwp givewp GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency CVE-2026-111974 5.3 MediumOctober 26, 2026
• stellarwp givewp GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses CVE-2026-111981 2.7 LowOctober 25, 2026
• stellarwp givewp GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant CVE-2026-111980 5.5 MediumOctober 25, 2026
• stellarwp givewp GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color CVE-2026-111979 6.8 MediumOctober 25, 2026
• stellarwp givewp GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import CVE-2026-111978 6.0 MediumOctober 25, 2026
• stellarwp givewp GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route CVE-2026-111976 5.3 MediumOctober 25, 2026
• stellarwp givewp GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name CVE-2026-85113 6.5 MediumSeptember 21, 2026
• stellarwp givewp GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch CVE-2026-85530 8.1 HighSeptember 16, 2026
• stellarwp givewp GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure CVE-2026-14319 7.5 HighJuly 31, 2026
• stellarwp givewp GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass CVE-2026-14317 5.3 MediumJuly 31, 2026
• stellarwp givewp GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings CVE-2026-14318 6.8 MediumJuly 30, 2026
• givewp Give < 3.19.0 - Reflected XSS CVE-2024-11921 4.8 MediumDecember 27, 2024
• givewp GiveWP < 2.24.1 - Unauthenticated SQLi CVE-2023-0224 9.8 CriticalJanuary 16, 2024
• givewp GiveWP < 2.24.0 - Contributor+ Stored XSS CVE-2022-4448 5.4 MediumFebruary 13, 2023
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - DoS via CSRF CVE-2022-2260 6.5 MediumAugust 1, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting CVE-2022-2215 4.8 MediumAugust 1, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool CVE-2022-0252 6.1 MediumFebruary 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard CVE-2021-25100 6.1 MediumFebruary 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting CVE-2021-25099 6.1 MediumFebruary 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.12.0 - Authenticated Stored XSS CVE-2021-24524 4.8 MediumAugust 23, 2021