CVE-2026-97196: Liquid Web / Stellarwp Givewp

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9.

Affected products

• Liquid Web / Stellarwp Givewp: up to and including 4.16.9

Published 2026-09-30. Last modified 2026-09-30.