CVE-2026-65464

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in GiveWP versions up to 4.16.3, allowing attackers to perform actions on behalf of users without their consent. This could lead to unauthorized transactions or changes in user settings, potentially compromising user accounts and data integrity. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.