Vulnerability intelligence

CVE-2026-82222

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

CVSS Score

Critical

EPSS — Exploit Probability

2.3%

Riskier than 83% of all CVEs · checked 2026-10-15

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Aug 31, 2026 · latest Aug 31, 2026

Coverage timeline

GiveWP plugin RCE bug lets attackers run code, patched 4.16.7.2
securityaffairs.com · Aug 31, 2026