Liquid Web / Stellarwp Givewp vulnerabilities
8 vulnerabilities
Known vulnerabilities in Liquid Web / Stellarwp Givewp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-42678liquid web / stellarwpgivewp+1
EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS.
This issue affects GiveWP: from n/a through 4.14.5.CVE-2026-106600liquid web / stellarwpgivewp+1EPSS score0.19%
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.CVE-2026-104404liquid web / stellarwpgivewp+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.CVE-2026-96333liquid web / stellarwpgivewpEPSS score0.27%
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.CVE-2026-97196liquid web / stellarwpgivewp+1EPSS score0.30%
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass.
This issue affects GiveWP: from n/a through 4.16.9.CVE-2026-34900liquid web / stellarwpgivewp+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.CVE-2026-82222liquid web / stellarwpgivewp+1EPSS score2.25%
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection.
This issue affects GiveWP: from n/a through 4.16.7.1.CVE-2023-23672givewpgivewp+2EPSS score0.41%
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1.