CVE-2026-82222: Liquid Web / Stellarwp Givewp

Critical severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

Affected products

• Liquid Web / Stellarwp Givewp: up to and including 4.16.7.1

Published 2026-08-28. Last modified 2026-08-28.