GiveWP vulnerabilities

4 known vulnerabilities in GiveWP from Liquid Web / StellarWP. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  GiveWP: Authentication Bypass by Spoofing

  CVE-2026-96333Oct 9, 2026Liquid Web / StellarWP

  Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

• 9.1 Critical severity

  GiveWP: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-97196Sep 30, 2026Liquid Web / StellarWP

  Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9.

• 10.0 Critical severity

  GiveWP: Deserialization of Untrusted Data

  CVE-2026-82222Aug 28, 2026Liquid Web / StellarWPEPSS 2.25%

  Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

• 7.1 High severity

  GiveWP: Improper Neutralization of Input During Web Page Generation

  CVE-2026-42678Jun 1, 2026Liquid Web / StellarWP

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5.