Skip to content
OpenAdvisories

Vendor

Liquid Web

3 known vulnerabilities.

Products

Kadence Shop Kit 1 GiveWP 1 Give Tributes 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-19658 Public exploit

    Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

    The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain i…

    Liquid Web Give Tributes Web / CMS
  • Critical 10.0
    CVE-2024-37099

    WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.

    Liquid Web GiveWP