CVE Catalog
CVE-2026-82222
CriticalCVSS 10.0Summary
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP from n/a through 4.16.7.1.
Risk Assessment
An attacker can exploit deserialization to execute arbitrary code or perform Object Injection attacks, potentially leading to application takeover.
Recommendation
Update GiveWP to a version newer than 4.16.7.1 and check for available security patches.
Original NVD description (English source)
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.