Skip to content
Threat Feed
Subscribe

Vendor

GiveWP

2 briefs RSS
high advisory

GiveWP: Privilege escalation vulnerability (CVE-2026-118193)

The GiveWP WordPress plugin (versions 4.19.1 and earlier) contains a privilege escalation flaw allowing attackers with administrative settings capabilities to assign arbitrary WordPress roles to new donor accounts.

GiveWP – Donation Plugin and Fundraising Platform wordpress privilege-escalation web-application-security
1t 1c
critical advisory

Unauthenticated PHP Object Injection in Give - Tributes WordPress Plugin

An unauthenticated PHP object injection vulnerability in the Give - Tributes plugin (<= 2.3.1) allows attackers to inject serialized objects during the donation process, potentially leading to RCE if chained with existing application gadgets.

Give - Tributes wordpress deserialization rce vulnerability
1r 2t 1c