GiveWP WordPress donation plugin flaw lets hackers execute server commands

August 28, 2026 · 6:18 pm 2 sources

Image: BleepingComputer

Coverage

Coverage

• GiveWP WordPress donation plugin flaw lets hackers execute server commands
  BleepingComputer · August 28, 2026 18:18
  A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]

More coverage

• Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
  The Hacker News · August 29, 2026 16:25
  Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and…