What is GHSA-f3f2-f9r3-mhc5?

GHSA-f3f2-f9r3-mhc5 is a security advisory published by GitHub Security Advisories with High severity. The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API...

Which CVE IDs does GHSA-f3f2-f9r3-mhc5 cover?

GHSA-f3f2-f9r3-mhc5 covers the following CVE IDs: CVE-2026-14319. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f3f2-f9r3-mhc5?

GHSA-f3f2-f9r3-mhc5 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-f3f2-f9r3-mhc5HighCVSS 7.5

The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API...

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-14319 →

📋 Description

The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14319
https://wpscan.com/vulnerability/f90c88a8-e5a5-4bcf-8fa1-59cdfef015a4
https://github.com/advisories/GHSA-f3f2-f9r3-mhc5