Filtered by vendor Liquid Web / Stellarwp Subscriptions
Total 11 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-96333 2 Liquid Web / Stellarwp, Wordpress-extensions 2 Givewp, Givewp 2026-10-24 7.5 High
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.
CVE-2026-106600 2 Liquid Web / Stellarwp, Wordpress-extensions 2 Givewp, Givewp 2026-10-24 5.3 Medium
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.
CVE-2026-110900 2 Liquid Web / Stellarwp, Wordpress-extensions 2 Bookit, Bookit 2026-10-23 5.3 Medium
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.
CVE-2026-104675 2 Liquid Web / Stellarwp, Wordpress-extensions 2 Event Tickets, Event Tickets 2026-10-22 4.3 Medium
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.
CVE-2026-110902 2 Liquid Web / Stellarwp, Wordpress-extensions 2 Event Tickets, Event Tickets 2026-10-21 4.3 Medium
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
CVE-2026-82222 2 Liquid Web / Stellarwp, Wordpress 2 Givewp, Wordpress 2026-08-28 10 Critical
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.
CVE-2026-66599 2 Liquid Web / Stellarwp, Wordpress 2 Wpcomplete, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.
CVE-2026-42662 2 Liquid Web / Stellarwp, Wordpress 2 Event Tickets, Wordpress 2026-06-23 6.5 Medium
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
CVE-2026-34900 2 Liquid Web / Stellarwp, Wordpress 2 Givewp, Wordpress 2026-06-16 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.
CVE-2026-42678 2 Liquid Web / Stellarwp, Wordpress 2 Givewp, Wordpress 2026-06-02 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5.
CVE-2026-40780 2 Liquid Web / Stellarwp, Wordpress 2 Bookit, Wordpress 2026-06-02 7.5 High
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.