Liquid Web / StellarWP GiveWP vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Liquid Web / StellarWP GiveWP: 5 record(s), with affected versions and fixes.

CVE-2026-96333 High · 7.5 CWE-290 Oct 9, 2026

WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVE-2026-106600 Medium · 5.3 CWE-862 Oct 8, 2026

WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.

CVE-2026-104404 Medium · 6.5 CWE-79 Oct 5, 2026

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.

CVE-2026-34900 High · 7.1 CWE-79 Jun 15, 2026

WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.

CVE-2026-42678 High · 7.1 CWE-79 Jun 1, 2026

WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5.