CVE-2026-65441

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in GiveWP versions 4.16.3 and earlier allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking or data theft. Organizations using affected versions of GiveWP should prioritize patching this vulnerability to protect their users and maintain the integrity of their web applications.