https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T18:33:31.105754+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111981 CVE-2026-111981 — GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses 2026-10-30T18:33:31.110551+00:00

Affected: Unknown GiveWP

The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, allowing users who have been granted donor-report (view) access but not donor-edit access to add, modify, or delete the stored address of any donor on the site.