PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-34900 Liquid Web / StellarWP CVE debrief

CVE-2026-34900 is a HIGH severity Unauthenticated Cross Site Scripting (XSS) vulnerability in GiveWP versions <= 4.14.2. The vulnerability has a CVSS score of 7.1 and was published on {cvePublishedAt}.

Vendor
Liquid Web / StellarWP
Product
GiveWP
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-15
Original CVE updated
2026-06-15
Advisory published
2026-06-15
Advisory updated
2026-06-15

Who should care

Administrators and users of GiveWP versions <= 4.14.2 should be aware of this vulnerability and take necessary actions to mitigate it.

Technical summary

The vulnerability is a reflected Cross-Site Scripting (XSS) vulnerability in the GiveWP plugin. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L.

Defensive priority

HIGH

Recommended defensive actions

  • Update GiveWP to a version greater than 4.14.2.
  • Refer to {ref-4} for mitigation or vendor reference.

Evidence notes

The vulnerability was reported by Patchstack and is listed in the NVD database.

Official resources

CVE-2026-34900 was published on 2026-06-15T21:16:42.103Z and modified on 2026-06-15T21:24:32.790Z.