CVE-2026-111980

The GiveWP WordPress plugin prior to version 4.19.0.1 contains a vulnerability where it fails to correctly determine the target page for a page-capability request . This flaw allows users assigned a custom fundraising role to bypass intended restrictions to edit, publish, and read pages owned by ...

CVE-2026-111980 GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant

The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators...

WordPress Sync Post With Other Site plugin < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification vulnerability

Contributor+ Arbitrary Page Creation/Modification vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Sync Post With Other Site versions 1.9.3...

CVE-2009-4876: Undefined Security Weakness

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...