CVE-2026-14319
Vulnerability Description
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
GiveWP
Discussion (0)
Add Comment
No comments yet. Be the first!