CVE-2026-111980

Published: Ott 25, 2026 Last Modified: Ott 25, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators.

https://wpscan.com/vulnerability/7664c532-7a74-47de-8ae1-df…
https://wpscan.com/vulnerability/7664c532-7a74-47de-8ae1-df4862067689/