Medium severity5.4NVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
CVE-2026-65464
CVE-2026-65464
Description
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
Affected products
2<=4.16.3+ 1 more
- (no CPE)range: <=4.16.3
- (no CPE)range: <=4.16.3
Package: https://wordpress.org/plugins/givewp
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)Wordfence Blog · Jul 30, 2026