Question 1

What is CVE-2026-111980 — CVE-2026-111980?

Accepted Answer

The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages owned by other users, including administrators.

Question 2

What is the authoritative source for CVE-2026-111980?

Accepted Answer

CVE-2026-111980 (CVE-2026-111980) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-111980CVE-2026-111980

Description

Scoring