CVE-2026-73352

WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.

We have discovered 31,144 live websites that are affected by CVE-2026-73352.

Run a Free Instant Scan



Affected Software

Product  GiveWP
Category Wordpress Plugins
Vulnerable Domains31,144 live websites (100% of GiveWP install base)
Vulnerable Versions
  • from 0 through 4.16.5.1
Vulnerable Versions Count232 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • Dthangws | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73352
United States16,449 websites


Germany1,988 websites
GB1,941 websites
Italy1,272 websites
France1,112 websites
Canada882 websites
Australia622 websites
India579 websites
Cyprus548 websites
Spain542 websites

Website Distribution by TLD

Number of websites using CVE-2026-73352
.org14,315 websites
.com7,234 websites
.it843 websites
.de820 websites
.org.uk624 websites
.net564 websites
.ca502 websites
.co.uk374 websites
.fr347 websites
.nl306 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73352

Top websites that are affected by CVE-2026-73352. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.org United States**,***
************.org United States**,***
*****.org United States**,***
******.org United States**,***
******************.org United States**,***
****************.org United States**,***
****************.org United States**,***
******.org United States**,***
****.info United States**,***
***********.org United States**,***
See full domain list

FAQ

CVE-2026-73352 is Missing Authorization in GiveWP
A total of 31,144 websites have been identified as vulnerable to CVE-2026-73352, based on global website indexing conducted by WebTechSurvey.
The GiveWP is affected by the CVE-2026-73352 vulnerability.
GiveWP versions up to and including 4.16.5.1 are vulnerable to CVE-2026-73352.