PT-2026-122944

CVE-2026-111981

·

Published

2026-10-25

·

Updated

2026-10-25

Description by

CVSS 3.1
2.7
Low
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions GiveWP WordPress plugin versions prior to 4.19.0.1
Description Insufficient capability checks when handling donor address changes allow users with donor-report (view) access, who lack donor-edit permissions, to add, modify, or delete the stored address of any donor on the site.
Recommendations Update GiveWP WordPress plugin to version 4.19.0.1 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-111981
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com