CVE-2026-14317
Vulnerability Description
The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
GiveWP
Discussion (0)
Add Comment
No comments yet. Be the first!