Skip to content
Threat Feed
Subscribe

Product

GiveWP – Donation Plugin and Fundraising Platform (<= 4.19.1)

1 brief RSS
high advisory

GiveWP: Privilege escalation vulnerability (CVE-2026-118193)

The GiveWP WordPress plugin (versions 4.19.1 and earlier) contains a privilege escalation flaw allowing attackers with administrative settings capabilities to assign arbitrary WordPress roles to new donor accounts.

GiveWP – Donation Plugin and Fundraising Platform wordpress privilege-escalation web-application-security
1t 1c