medium5.5
CVE-2026-111980
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundrais…
Impact
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators.
Affected products
| Product | Affected versions |
|---|---|
| GiveWP WordPress Plugin | before 4.19.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.