CVE-2026-104672

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in GiveWP versions up to 4.17.0 allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, data theft, or defacement. Organizations using affected versions of GiveWP should prioritize patching this vulnerability to safeguard their applications and protect user data from exploitation.