CVE-2026-96830

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in GiveWP versions up to 4.16.9 allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions of GiveWP should prioritize patching this vulnerability to protect their users and maintain the integrity of their web applications.