Critical · 9.1 CVE-2026-97196 EUVD-2026-89655GHSA-wm87-9v37-7595

WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Description

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass.

This issue affects GiveWP: from n/a through 4.16.9.

Vendor	Product	Affected	Fixed
Liquid Web / StellarWP	GiveWP	≤ 4.16.9	—