Unrated severityNVD Advisory· Published Jul 31, 2026· Updated Jul 31, 2026
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
CVE-2026-14319
Description
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/f90c88a8-e5a5-4bcf-8fa1-59cdfef015a4/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.