Nexcess GiveWP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Nexcess GiveWP: 12 record(s), with affected versions and fixes.
CVE-2026-104672
High · 7.1
CWE-79 Oct 6, 2026
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
CVE-2026-104405
High · 8.1
CWE-266 Oct 6, 2026
WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
CVE-2026-97066
Medium · 5.3
CWE-639 Sep 30, 2026
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.
CVE-2026-96834
Medium · 6.5
CWE-862 Sep 30, 2026
WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.
CVE-2026-96830
High · 7.1
CWE-79 Sep 30, 2026
WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
CVE-2026-73352
Medium · 6.5
CWE-862 Aug 18, 2026
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.
CVE-2026-73348
Medium · 6.5
CWE-862 Aug 18, 2026
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
CVE-2026-73357
Medium · 6.5
CWE-79 Aug 13, 2026
WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
CVE-2026-73349
Medium · 5.3
CWE-862 Aug 13, 2026
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
CVE-2026-66690
High · 7.1
CWE-79 Aug 6, 2026
WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
CVE-2026-65441
High · 7.1
CWE-79 Jul 27, 2026
WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-65464
Medium · 5.4
CWE-352 Jul 23, 2026
WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.