https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:51:38 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-85530 <p>The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor&#39;s e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user account linked to one, including an administrator&#39;s.</p> <p>The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor&#39;s e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user account linked to one, including an administrator&#39;s.</p> https://db.gcve.eu/vuln/fkie_cve-2026-85530 https://db.gcve.eu/vuln/ghsa-f8r4-h4wf-5gg7 <p>The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor&#39;s e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user account linked to one, including an administrator&#39;s.</p> <p>The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor&#39;s e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user account linked to one, including an administrator&#39;s.</p> https://db.gcve.eu/vuln/ghsa-f8r4-h4wf-5gg7