Vulnerability index

Browse CVEs

52 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Givewp MEDIUM 6.1
CVE-2025-13206

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in a…

Fix: 4.13.1+
Fix from $1,600 2025-11-19
Givewp MEDIUM 5.3
CVE-2025-11228

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi…

Fix: 4.10.1+
Fix from $1,600 2025-10-04
Givewp MEDIUM 6.5
CVE-2025-11227

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including…

Fix: 4.10.1+
Fix from $1,600 2025-10-04
Givewp MEDIUM 5.3
CVE-2025-8620

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including…

Fix: 4.6.1+
Fix from $1,600 2025-08-06
Givewp MEDIUM 5.4
CVE-2025-7205

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter…

Fix: 4.6.0+
Fix from $1,600 2025-07-31
Givewp MEDIUM 5.4
CVE-2025-4571

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insu…

Fix: 4.3.1+
Fix from $1,600 2025-06-19
Givewp MEDIUM 6.5
CVE-2025-2331

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…

Fix: 3.22.2+
Fix from $1,600 2025-03-22
Givewp HIGH 7.5
CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c…

Fix: 3.22.1+
Fix from $1,950 2025-03-15
Givewp CRITICAL 9.8
CVE-2025-0912

The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.4 via deserialization of u…

Fix: 3.20.0+
Fix from $2,300 2025-03-04
Givewp CRITICAL 9.8
CVE-2025-22777

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through <= 3.19.…

Fix: 3.19.4+
Fix from $2,300 2025-01-13
Givewp CRITICAL 9.8
CVE-2024-12877

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including…

Fix: after 3.19.2
Fix from $2,300 2025-01-11
Givewp MEDIUM 5.4
CVE-2023-23672

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1.

Fix: 2.25.2+
Fix from $1,600 2025-01-02
Givewp CRITICAL 9.8
CVE-2023-47183

Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…

Fix: 2.33.2+
Fix from $2,300 2025-01-02
Givewp CRITICAL 9.8
CVE-2024-9634

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including…

Fix: 3.16.4+
Fix from $2,300 2024-10-16
Givewp CRITICAL 9.8
CVE-2024-8353EPSS 29%

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including…

Fix: 3.16.2+
Fix from $2,300 2024-09-28
Givewp HIGH 7.2
CVE-2024-9130

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all…

Fix: 3.16.2+
Fix from $1,950 2024-09-27
Givewp HIGH 8.8
CVE-2024-47315

Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.15.1.

Fix: 3.16.0+
Fix from $1,950 2024-09-25
Givewp MEDIUM 5.3
CVE-2024-6551

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including…

Fix: 3.16.0+
Fix from $1,600 2024-08-29
Givewp MEDIUM 5.4
CVE-2024-5941

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing…

Fix: 3.14.2+
Fix from $1,600 2024-08-20
Givewp CRITICAL 9.8
CVE-2024-5932EPSS 74%

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including…

Fix: 3.14.2+
Fix from $2,300 2024-08-20
Givewp MEDIUM 5.3
CVE-2024-5939

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c…

Fix: 3.14.0+
Fix from $1,600 2024-08-20
Givewp MEDIUM 5.3
CVE-2024-5940

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi…

Fix: 3.14.0+
Fix from $1,600 2024-08-20
Givewp CRITICAL 9.8
CVE-2024-37099

Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.

Fix: 3.14.2+
Fix from $2,300 2024-08-19
Givewp MEDIUM 5.4
CVE-2024-5977

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a…

Fix: 3.14.0+
Fix from $1,600 2024-07-19
Givewp MEDIUM 6.1
CVE-2024-35679

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP GiveWP give.This issue affects GiveWP…

Fix: 3.12.1+
Fix from $1,600 2024-06-08
Givewp MEDIUM 5.4
CVE-2024-3714

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' …

Fix: 3.11.0+
Fix from $1,600 2024-05-18
Givewp HIGH 8.8
CVE-2023-41665

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0.

Fix: 2.33.1+
Fix from $1,950 2024-05-17
Givewp MEDIUM 5.4
CVE-2024-1957

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' …

Fix: 3.7.0+
Fix from $1,600 2024-04-13
Givewp MEDIUM 5.4
CVE-2024-1424

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)…

Fix: 3.6.0+
Fix from $1,600 2024-04-09
Givewp HIGH 7.2
CVE-2024-30229

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.4.2.

Fix: 3.5.0+
Fix from $1,950 2024-03-28