Nexcess Givewp
13 CVEs affecting Nexcess Givewp. Latest disclosed: 2026-10-30. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-104405 | High | 8.1 | 2026-10-06 | Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. |
CVE-2026-104672 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions. |
CVE-2026-96830 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. |
CVE-2026-66690 | High | 7.1 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. |
CVE-2026-65441 | High | 7.1 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. |
CVE-2026-116853 | Medium | 6.5 | 2026-10-30 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. |
CVE-2026-96834 | Medium | 6.5 | 2026-09-30 | Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions. |
CVE-2026-73352 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
CVE-2026-73348 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
CVE-2026-73357 | Medium | 6.5 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. |
CVE-2026-65464 | Medium | 5.4 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions. |
CVE-2026-97066 | Medium | 5.3 | 2026-09-30 | Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions. |
CVE-2026-73349 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |