805 matches found
CVE-2026-73352 WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-73348
GiveWP WordPress plugin versions before 4.16.6 have an unauthenticated broken access control flaw, allowing network-based attackers with no credentials to access restricted functionality (CVSS 6.5). Upgrade to 4.16.6 or later. No in-the-wild exploitation reported. Details: https://patchstack.com/...
CVE-2026-73348 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions 4.16.6...
CVE-2026-73349
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73357
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
EUVD-2026-57914
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73357
CVE-2026-73357 is a Donor Cross Site Scripting (XSS) in the WordPress GiveWP plugin, affecting versions before 4.16.6. The CVSS v3.1 base score is 6.5 (MEDIUM). Patch: upgrade to 4.16.6 or newer. Connected sources confirm GiveWP
CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73349 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73349
CVE-2026-73349 applies to the WordPress GiveWP plugin, pre-4.16.6. It is an unauthenticated broken access control vulnerability reported for GiveWP before version 4.16.6. The provided CVSSv3.1 metrics indicate network access, low attack complexity, no privileges required, with no confidentiality ...
EUVD-2026-57912
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
PT-2026-71602
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
PT-2026-71604
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin GiveWP versions 4.16.6...