Is CVE-2026-14319 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-14319

Description

The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.