Browse CVEs

MEDIUM 6.1 CVE-2024-27987 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP GiveWP give.This issue affects GiveWP… Givewp 3.4.0+ Fix from $1,6002024-03-15 MEDIUM 5.4 CVE-2023-51415 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising… Givewp after 3.2.2 Fix from $1,6002024-02-10 CRITICAL 9.8 CVE-2023-0224 The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attacker… Givewp 2.24.1+ Fix from $2,3002024-01-16 MEDIUM 5.4 CVE-2023-4247 The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. This is due to missing or incor… Givewp after 2.33.3 Fix from $1,6002024-01-11 CRITICAL 9.8 CVE-2023-32513 Deserialization of Untrusted Data vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plug… Givewp after 2.25.3 Fix from $2,3002023-12-28 MEDIUM 6.5 CVE-2022-40312 Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plu… Givewp after 2.25.1 Fix from $1,6002023-12-18 CRITICAL 9.8 CVE-2023-22719 Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a through 2.25.1. Givewp after 2.25.1 Fix from $2,3002023-11-07 HIGH 8.8 CVE-2023-25450 Cross-Site Request Forgery (CSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin <= 2.25.1 versions. Givewp 2.25.2+ Fix from $1,9502023-06-15 MEDIUM 5.4 CVE-2023-23668 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in GiveWP plugin <= 2.25.1 versions. Givewp 2.25.2+ Fix from $1,6002023-05-08 MEDIUM 5.4 CVE-2022-4448 The GiveWP WordPress plugin before 2.24.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wh… Givewp 2.24.0+ Fix from $1,6002023-02-13 MEDIUM 6.5 CVE-2022-2260 The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exporting parameters such as dat… Givewp 2.21.3+ Fix from $1,6002022-08-01 HIGH 7.2 CVE-2022-28700 Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. Givewp 2.21.0+ Fix from $1,9502022-07-21 MEDIUM 5.3 CVE-2022-2117 The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-A… Givewp after 2.20.2 Fix from $1,6002022-07-18 MEDIUM 6.1 CVE-2022-0252 The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard,… Givewp 2.17.3+ Fix from $1,6002022-02-21 MEDIUM 6.1 CVE-2021-25099 The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthen… Givewp 2.17.3+ Fix from $1,6002022-02-21 MEDIUM 6.1 CVE-2021-25100 The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, … Givewp 2.17.3+ Fix from $1,6002022-02-21 MEDIUM 6.1 CVE-2021-24213 The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability i… Givewp 2.10.0+ Fix from $1,6002021-04-12 MEDIUM 5.3 CVE-2020-20627 The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change. Givewp after 2.5.9 Fix from $1,6002020-08-31 HIGH 7.5 CVE-2019-20360 A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiabl… Givewp 2.5.5+ Fix from $1,9502020-01-08 MEDIUM 5.4 CVE-2019-15317 The give plugin before 2.4.7 for WordPress has XSS via a donor name. Givewp 2.4.7+ Fix from $1,6002019-08-22 CRITICAL 9.8 CVE-2019-13578 A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability wou… Givewp after 2.5.0 Fix from $2,3002019-08-15 MEDIUM 6.1 CVE-2019-9909 The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS. Givewp 2.3.1+ Fix from $1,6002019-03-22