CVE-2026-73348

9th percentile - higher than 9% of all known CVEs

Broken Access Control vulnerability in GiveWP versions earlier than 4.16.6. The attack does not require authentication.

An unauthenticated attacker can exploit this vulnerability to gain unauthorized access to functions, potentially leading to data integrity compromise or full control of the plugin.

Update the GiveWP plugin to version 4.16.6 or later, which includes the fix.