CVE-2026-14317

CVE-2026-14317 : The GiveWP WordPress plugin is vulnerable in versions before 4.16.3. It does not restrict the set of available payment gateways to those enabled by the administrator and derives this from request input, allowing unauthenticated users to complete donations via a payment gateway th...