Is CVE-2026-111974 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111974?

CVE-2026-111974 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-111974

Description

The GiveWP WordPress plugin before 4.19.0.1 does not restrict the currency of a donation to the one the site or form accepts, while comparing its amount limits as bare numbers, allowing unauthenticated users to make donations below a form's configured minimum or fixed amount.