Advisories · Technology

Nexcess GiveWP.

Every CVE that names Nexcess GiveWP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116853 CVE record

CVSS 6.5 Medium

WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-104672 CVE record

CVSS 7.1 High

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- Nexcess GiveWP
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2026-104405 CVE record

CVSS 8.1 High

WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
- Nexcess GiveWP
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-97066 CVE record

CVSS 5.3 Medium

WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-96834 CVE record

CVSS 6.5 Medium

WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-96830 CVE record

CVSS 7.1 High

WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
- Nexcess GiveWP
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-73352 CVE record

CVSS 6.5 Medium

WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-73348 CVE record

CVSS 6.5 Medium

WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-73357 CVE record

CVSS 6.5 Medium

WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
- Nexcess GiveWP
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2026-73349 CVE record

CVSS 5.3 Medium

WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
- Nexcess GiveWP
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2026-66690 CVE record

CVSS 7.1 High

WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability
- Nexcess GiveWP
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2026-65441 CVE record

CVSS 7.1 High

WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
- Nexcess GiveWP
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026
CVE-2026-65464 CVE record

CVSS 5.4 Medium

WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
- Nexcess GiveWP
- Cross-site request forgery (CSRF)
Not analysed yet 23 Jul 2026