Givewp

This hub aggregates every CVE we track for Givewp, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Givewp.

• CVE-2026-82222WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability10.0Aug 28, 2026
• CVE-2026-73352WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability6.5Aug 18, 2026
• CVE-2026-73348WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability6.5Aug 18, 2026
• CVE-2026-73357WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability6.5Aug 13, 2026
• CVE-2026-73349WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability5.3Aug 13, 2026
• CVE-2026-66690WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability7.1Aug 6, 2026
• CVE-2026-65441WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability7.1Jul 27, 2026
• CVE-2026-65464WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability5.4Jul 23, 2026
• CVE-2026-34900WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jun 15, 2026
• CVE-2026-42678WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability7.1Jun 1, 2026
• CVE-2026-42642WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability5.3Apr 29, 2026
• CVE-2025-66533WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability5.3Dec 9, 2025
• CVE-2025-67467WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability5.4Dec 9, 2025
• CVE-2025-13206GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'7.2Nov 19, 2025
• CVE-2025-11228GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association5.3Oct 4, 2025