LOWVulnerability
Global

GiveWP WordPress donation plugin flaw lets hackers execute server commands

·Source: BleepingComputer

Updated:

Executive Summary

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]

Analysis

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]
Source Attribution

Originally published by BleepingComputer on Aug 28, 2026.

Related Threats

MEDIUMVulnerabilityNEW

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. [...]

BleepingComputer
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-82017 — IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry...

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader. Attackers can inject malicious kernel command line parameters that execute with boot environment privileg

CVE-2026-82017
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-3627 — IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacke...

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVE-2026-3627
NIST NVD