Stellarwp

    Dashboard / Vendors

    Products: 14
    Vulnerabilities: 55
    Known Exploited: 0
    7
    Critical Level Threats
    13
    High Level Threats
    35
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118193

    GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter

    Last Modified: Nov 05, 2026
    Published: Nov 05, 2026

    CVE-2026-97643

    GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes

    Last Modified: Oct 23, 2026
    Published: Oct 10, 2026

    CVE-2026-95606

    WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2026-103354

    WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability

    Last Modified: Oct 05, 2026
    Published: Oct 04, 2026

    CVE-2026-97634

    Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' Parameter

    Last Modified: Oct 02, 2026
    Published: Oct 02, 2026
    Items Per Page
    Stellarwp Vulnerabilities & Security CVEs | CVE-DB