CVE-2026-111976

The GiveWP WordPress plugin before version 4.19.0.1 is vulnerable to an unauthenticated information disclosure flaw. The plugin fails to perform necessary status or capability checks when rendering a donation form on a public front-end route. This allows unauthenticated visitors to view the conte...

CVE-2026-111976 GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route

The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation form on a public front-end route, allowing unauthenticated visitors to view the content and settings of unpublished draft, pending, private and scheduled donation forms that...