Nexcess GiveWP

3 known vulnerabilities in Nexcess GiveWP, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-97066 CVSS 5.3 medium Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.
  • CVE-2026-96834 CVSS 6.5 medium Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.
  • CVE-2026-96830 CVSS 7.1 high Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.