CVE Catalog

CVE-2026-73349

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Unauthenticated Broken Access Control vulnerability in GiveWP plugin versions prior to 4.16.6.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to functionality, potentially leading to data integrity issues or unauthorized changes.

Recommendation

Update the GiveWP plugin to version 4.16.6 or later.

Original NVD description (English source)

Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS