What is GHSA-r3pc-c6qw-qwpc?

GHSA-r3pc-c6qw-qwpc is a security advisory published by GitHub Security Advisories with Medium severity. The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment...

Which CVE IDs does GHSA-r3pc-c6qw-qwpc cover?

GHSA-r3pc-c6qw-qwpc covers the following CVE IDs: CVE-2026-14317. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r3pc-c6qw-qwpc?

GHSA-r3pc-c6qw-qwpc has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-r3pc-c6qw-qwpcMediumCVSS 5.3

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment...

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-14317 →

📋 Description

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14317
https://wpscan.com/vulnerability/fa6f5470-b30d-4052-aacd-a0571d4678ac
https://github.com/advisories/GHSA-r3pc-c6qw-qwpc