Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GiveWP 4.16.3 Clear all filters
TI-2026-12110 CVE-2026-14319 · GHSA-f3f2-f9r3-mhc5

GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure

Priority HIGH 72

The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-07-31 Fixed in 4.16.3 CWE-200
TI-2026-12108 CVE-2026-14317 · GHSA-r3pc-c6qw-qwpc

GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass

Priority MEDIUM 63

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to compl…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-07-31 Fixed in 4.16.3 CWE-862