Vulnerabilities

CVSS

10.0 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Risk score

80.0

Published

2026-08-28

Status

Published

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

Weaknesses

CWE-502

Coverage 1

vulnerability

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical vulnerabilities have been discovered in popular WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP. These flaws could lead to complete site takeover, all…

The Hacker News · 1d ago Critical

CVE-2026-76581CVE-2026-18431CVE-2026-19632wordpressvulnerabilityplugin

All articles mentioning it

Advisories and references

• patchstack.com/database/wordpress/plugin/give/vulnerability/wordpres...
• patchstack.com/articles/unauthenticated-php-object-injection-to-remo...