high7.5
CVE-2026-14319
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenti…
Impact
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.
Affected products
| Product | Affected versions |
|---|---|
| GiveWP WordPress Plugin | before 4.16.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.