Browse CVEs

MEDIUM 6.1 CVE-2025-13206 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in a… Givewp 4.13.1+ Fix from $1,6002025-11-19 MEDIUM 5.3 CVE-2025-11228 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi… Givewp 4.10.1+ Fix from $1,6002025-10-04 MEDIUM 6.5 CVE-2025-11227 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including… Givewp 4.10.1+ Fix from $1,6002025-10-04 MEDIUM 5.3 CVE-2025-8620 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including… Givewp 4.6.1+ Fix from $1,6002025-08-06 MEDIUM 5.4 CVE-2025-7205 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter… Givewp 4.6.0+ Fix from $1,6002025-07-31 MEDIUM 5.4 CVE-2025-4571 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insu… Givewp 4.3.1+ Fix from $1,6002025-06-19 MEDIUM 6.5 CVE-2025-2331 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… Givewp 3.22.2+ Fix from $1,6002025-03-22 HIGH 7.5 CVE-2025-2025 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c… Givewp 3.22.1+ Fix from $1,9502025-03-15 CRITICAL 9.8 CVE-2025-0912 The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.4 via deserialization of u… Givewp 3.20.0+ Fix from $2,3002025-03-04 CRITICAL 9.8 CVE-2025-22777 Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through <= 3.19.… Givewp 3.19.4+ Fix from $2,3002025-01-13 CRITICAL 9.8 CVE-2024-12877 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… Givewp after 3.19.2 Fix from $2,3002025-01-11 MEDIUM 5.4 CVE-2023-23672 Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1. Givewp 2.25.2+ Fix from $1,6002025-01-02 CRITICAL 9.8 CVE-2023-47183 Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… Givewp 2.33.2+ Fix from $2,3002025-01-02 CRITICAL 9.8 CVE-2024-9634 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… Givewp 3.16.4+ Fix from $2,3002024-10-16 CRITICAL 9.8 CVE-2024-8353EPSS 29% The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… Givewp 3.16.2+ Fix from $2,3002024-09-28 HIGH 7.2 CVE-2024-9130 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all… Givewp 3.16.2+ Fix from $1,9502024-09-27 HIGH 8.8 CVE-2024-47315 Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.15.1. Givewp 3.16.0+ Fix from $1,9502024-09-25 MEDIUM 5.3 CVE-2024-6551 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including… Givewp 3.16.0+ Fix from $1,6002024-08-29 MEDIUM 5.4 CVE-2024-5941 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing… Givewp 3.14.2+ Fix from $1,6002024-08-20 CRITICAL 9.8 CVE-2024-5932EPSS 74% The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… Givewp 3.14.2+ Fix from $2,3002024-08-20 MEDIUM 5.3 CVE-2024-5939 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c… Givewp 3.14.0+ Fix from $1,6002024-08-20 MEDIUM 5.3 CVE-2024-5940 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi… Givewp 3.14.0+ Fix from $1,6002024-08-20 CRITICAL 9.8 CVE-2024-37099 Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1. Givewp 3.14.2+ Fix from $2,3002024-08-19 MEDIUM 5.4 CVE-2024-5977 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a… Givewp 3.14.0+ Fix from $1,6002024-07-19 MEDIUM 6.1 CVE-2024-35679 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP GiveWP give.This issue affects GiveWP… Givewp 3.12.1+ Fix from $1,6002024-06-08 MEDIUM 5.4 CVE-2024-3714 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' … Givewp 3.11.0+ Fix from $1,6002024-05-18 HIGH 8.8 CVE-2023-41665 Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0. Givewp 2.33.1+ Fix from $1,9502024-05-17 MEDIUM 5.4 CVE-2024-1957 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' … Givewp 3.7.0+ Fix from $1,6002024-04-13 MEDIUM 5.4 CVE-2024-1424 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)… Givewp 3.6.0+ Fix from $1,6002024-04-09 HIGH 7.2 CVE-2024-30229 Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.4.2. Givewp 3.5.0+ Fix from $1,9502024-03-28