UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-111980
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-25T06:45:46.319867+00:00
- Cve id
- CVE-2026-111980
- First seen by Signal
- 2026-10-25T06:43:48+00:00
- Retrieved at
- 2026-10-25T06:46:53+00:00
- Published at
- 2026-10-25T06:16:31.490
- Last modified
- 2026-10-25T06:16:31.490
Explore deeper with Ninja Signal's threat intelligence graph