CVE-2026-82222Suited to automated attack · CISA
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
CVSS score
10.0
EPSS probability
%2.3
Risk score
0.2
Published
1 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, are listed below - CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in
Similar Vulnerabilities
7.5
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-82222"