CVE-2026-66690

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in GiveWP versions 4.16.5 and earlier allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions of GiveWP should prioritize patching this vulnerability to mitigate the risk of exploitation and protect user data.