CVE Catalog
CVE-2026-73349
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
Unauthenticated Broken Access Control vulnerability in GiveWP plugin versions prior to 4.16.6.
Risk Assessment
An unauthenticated attacker may gain unauthorized access to functionality, potentially leading to data integrity issues or unauthorized changes.
Recommendation
Update the GiveWP plugin to version 4.16.6 or later.
Original NVD description (English source)
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

