Medium · 6.5 CVE-2026-96834 EUVD-2026-89886GHSA-xwww-243m-34r8

WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

Published Sep 30, 2026 · Updated Nov 12, 2026 · Assigned by Patchstack

Vendor: Liquid Web / StellarWP Product: GiveWP

Description

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a through 4.16.9.

Affected products

Vendor	Product	Affected	Fixed
Liquid Web / StellarWP	GiveWP	≤ 4.16.9	—

References

https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-9-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry