CVE-2026-14319 — GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure

CVE-2026-14319

GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure PUBLISHED

Description (CNA)

The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.

Affected (CNA)

Vendor / product	Versions
Unknown / GiveWP	affected 0 before 4.16.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f90c88a8-e5a5-4bcf-8fa1-59cdfef015a4/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.