UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-111979

The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings before outputting it inside an HTML attribute, allowing users with a custom form-editing GiveWP WordPress plugin before 4.19.0.1 role to inject arbitrary web scripts that execute in the browser of any visitor or administrator who opens the affected donation form.

Properties

Last source
NVD
Nvd fetched at
2026-10-25T06:45:46.319867+00:00
Cve id
CVE-2026-111979
First seen by Signal
2026-10-25T06:43:48+00:00
Retrieved at
2026-10-25T06:46:53+00:00
Published at
2026-10-25T06:16:31.387
Last modified
2026-10-25T06:16:31.387

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-111979 — Ninja Signal Threat Intelligence | Ninja Signal