6 matches found
WordPress GiveWP plugin < 4.19.0.1 - Give Worker+ Arbitrary Page Modification vulnerability
Give Worker+ Arbitrary Page Modification vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin GiveWP versions 4.19.0.1...
CVE-2026-111980 GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators...
CVE-2026-111980 GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators...
CVE-2026-111980
The GiveWP WordPress plugin (versions before 4.19.0.1 ) is vulnerable to an incorrect authorization issue (CWE-863). The plugin fails to correctly determine which page a page-capability request applies to. This flaw allows users assigned with a custom fundraising role to perform unauthorized acti...
WordPress Sync Post With Other Site plugin < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification vulnerability
Contributor+ Arbitrary Page Creation/Modification vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Sync Post With Other Site versions 1.9.3...
