Authorization Bypass in Give - Peer-to-Peer Plugin for WordPress

CVE-2026-82663

What is CVE-2026-82663?

The Give - Peer-to-Peer plugin for WordPress is susceptible to an authorization bypass, allowing unauthorized users to exploit weaknesses in access controls. This vulnerability enables attackers to alter key aspects of existing campaigns, including changing the team's name, story, and goal, as well as modifying profile images and uploading media files without proper authentication. These risks highlight the importance of implementing strict validation mechanisms to protect plugin functionalities and ensure user actions are appropriately authorized.

References