Skip to content
OpenAdvisories

Vendor

Liquid Web / StellarWP

40 known vulnerabilities.

Products

GiveWP 10 The Events Calendar 9 Event Tickets 9 BookIt 4 Gutenberg Blocks by Kadence Blocks 4 Advanced Post Manager 2 WPComplete 2
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2026-111396

    WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.

    Liquid Web / StellarWP Advanced Post Manager
  • High 7.5
    CVE-2026-96333

    WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

    Liquid Web / StellarWP GiveWP
  • High 7.1
    CVE-2026-66479

    WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.

    Liquid Web / StellarWP WPComplete
  • High 7.1
    CVE-2026-103354

    WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a th…

    Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks
  • High 8.5
    CVE-2026-97287

    WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.

    Liquid Web / StellarWP Event Tickets
  • High 7.1
    CVE-2026-66599

    WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

    Liquid Web / StellarWP WPComplete
  • High 7.1
    CVE-2026-34900

    WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.

    Liquid Web / StellarWP GiveWP
  • High 7.5
    CVE-2026-40780

    WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.

    Liquid Web / StellarWP BookIt
  • High 7.1
    CVE-2026-42678

    WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5.

    Liquid Web / StellarWP GiveWP