Live › vulnerability › CVE-2026-116853
GiveWP, a WordPress donation plugin, has an access control flaw that lets an unauthenticated visitor perform actions it should block. The sources do not state exactly what data or actions are exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the GiveWP plugin at version 4.19.0.1 or earlier are in the affected range. The sources do not say which endpoints or settings make a site exposed, so assume any site with the plugin active may be affected until the vendor's advisory is read.
No product ranges from the sources yet.
wp plugin get give --field=version4.19.0.1 and below as affectedNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-116853")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.