Nexcess Givewp
7 CVEs affecting Nexcess Givewp. Latest disclosed: 2026-08-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66690 | High | 7.1 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. |
CVE-2026-65441 | High | 7.1 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. |
CVE-2026-73352 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
CVE-2026-73348 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
CVE-2026-73357 | Medium | 6.5 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. |
CVE-2026-65464 | Medium | 5.4 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions. |
CVE-2026-73349 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |