CVE-2026-82663

The Give - Peer-to-Peer plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 2.9.5 . The root cause is the plugin's failure to properly verify user authorization when performing specific actions. An unauthenticated attacker who knows or discovers an ex...

WordPress Give - Peer-to-Peer plugin <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload vulnerability

WordPress Give - Peer-to-Peer plugin = 2.9.5 - Authorization Bypass to Team Modification and Media Upload vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Give - Peer-to-Peer versions = 2.9.5...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the MDM bootstrap package configuration. An attacker can modify arbitrary team configurations, exfiltrate sensitive data from the database, and inject arbitrary content into team configurations by sending crafted API...