Product by Liquid Web / Stellarwp
Givewp
9 known vulnerabilities in Givewp (Liquid Web / Stellarwp), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-82222 | WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability | 10.0 | |
| Critical | CVE-2026-97196 | WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability | 9.1 | |
| High | CVE-2026-96333 | WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability | 7.5 | |
| Medium | CVE-2026-104404 | WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2026-106600 | WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability | 5.3 | |
| High | CVE-2026-34900 | WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2026-42678 | WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2025-66533 | WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability | 6.5 | |
| Medium | CVE-2023-23672 | WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability | 5.4 |