Approved changes feed: RSS · Atom

cpe:2.3:a:nexcess:givewp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNexcess (f5bdcb66-98a6-529a-bcee-ee2e31e003a8)
ProductGivewp (3e8ef746-036a-51f0-babe-50885d412cf7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-73357 vulnerable 2026-09-16 04:33:10.047774 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
Published: 2026-08-13T13:37:24.466Z
Updated: 2026-08-13T15:33:21.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-73349 vulnerable 2026-09-16 04:33:09.530838 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
MEDIUM (5.3)
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
Published: 2026-08-13T13:37:23.200Z
Updated: 2026-08-13T15:32:54.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65441 vulnerable 2026-09-16 04:33:07.867212 WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
Published: 2026-07-27T22:44:03.877Z
Updated: 2026-07-28T16:07:09.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66690 vulnerable 2026-09-16 04:32:54.830241 WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
Published: 2026-08-06T14:28:01.461Z
Updated: 2026-08-06T19:08:04.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65464 vulnerable 2026-07-29 01:06:20.007842 WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
Published: 2026-07-23T11:18:42.106Z
Updated: 2026-07-23T13:41:23.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.