Nexcess Givewp vulnerabilities

12 vulnerabilities

Known vulnerabilities in Nexcess Givewp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-73352nexcessgivewp+1
EPSS score
0.27%
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.6.5CVE-2026-73348nexcessgivewp+1
EPSS score
0.27%
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.6.5CVE-2026-73357nexcessgivewp+1
EPSS score
0.22%
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.5.3CVE-2026-73349nexcessgivewp+1
EPSS score
0.29%
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.7.2CVE-2026-65441nexcessgivewp+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.5.4CVE-2026-65464nexcessgivewp+1
EPSS score
0.14%
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.7.2CVE-2026-66690nexcessgivewp+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.7.2CVE-2026-104672nexcessgivewp+1
EPSS score
0.18%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.8.1CVE-2026-104405nexcessgivewp+1
EPSS score
0.28%
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.6.5CVE-2026-96834nexcessgivewp+1
EPSS score
0.33%
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.7.2CVE-2026-96830nexcessgivewp+1
EPSS score
0.20%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.5.3CVE-2026-97066nexcessgivewp+1
EPSS score
0.23%
Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.