CVE-2026-14319 — GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to re…
Published: 2026-07-31 · CVSS: 7.5 · CVSS 3.1
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7