Search: CVE-2026-82663

The Give - Peer-to-Peer WordPress plugin versions up to 2.9.5 contain an authorization bypass vulnerability. This flaw allows unauthenticated attackers who know or discover valid campaign and team IDs to modify team details and upload media files without proper authorization. The vulnerability can be chained with another (CVE-2026-82568) to achieve unauthenticated remote code execution.