GiveWP
- Software type
- WordPress plugin
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/17/2026, GiveWP recorded 5 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of GiveWP and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-96333WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerabilityCVE-2026-106600WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerabilityCVE-2026-104404WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-97196WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerabilityCVE-2026-82222WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-96333WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-106600WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-104404WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-97196WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability | Exploitation statusNot exploited | FixYes | Published09/30/2026 | SeverityCritical |
|---|
CVE-2026-82222WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability | Exploitation statusNot exploited | FixYes | Published08/28/2026 | SeverityCritical |
|---|
CVE-2026-34900WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published06/15/2026 | SeverityHigh |
|---|
CVE-2026-42678WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2023-23672WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability | Exploitation statusNot exploited | FixYes | Published01/02/2025 | SeverityMedium |
|---|
8 Results | Page 1 of 1