CVE Catalog
CVE-2026-73352
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
Broken Access Control vulnerability in GiveWP versions up to 4.16.5.1. The attack does not require authentication.
Risk Assessment
An unauthenticated attacker can gain unauthorized access to administrative functions, potentially leading to settings modification, data theft, or full control of the plugin.
Recommendation
Update the GiveWP plugin to version 4.16.6 or later, which includes the fix.
Original NVD description (English source)
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.