Liquid Web / Stellarwp

9 CVEs across 5 Liquid Web / Stellarwp products. Browse Liquid Web / Stellarwp vulnerabilities, severities, and proof-of-concept exploits.

Liquid Web / Stellarwp products with known CVEs

ProductCVEs
Givewp5
Bookit1
Event Tickets1
The Events Calendar1
Wpcomplete1
Liquid Web / Stellarwp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-97196Critical9.12026-09-30Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: fro…
CVE-2026-82222Critical10.02026-08-28Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.
CVE-2026-66599High7.12026-08-24Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.
CVE-2026-49772Critical9.32026-06-16Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind S…
CVE-2026-42662Medium6.52026-06-15Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
CVE-2026-34900High7.12026-06-15Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.
CVE-2026-40780High7.52026-06-02Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affe…
CVE-2026-42678High7.12026-06-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This…
CVE-2023-23672Medium5.42025-01-02Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1.