WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
give
Published
2024-06-06
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.12.1 - Reflected Cross-Site Scripting
Slug
give
Published
2024-07-18
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.2 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Missing Authorization to Limited Information Exposure
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Missing Authorization to Unauthenticated Event Settings Update
Slug
give
Published
2024-08-28
Title
GiveWP < 3.16.0 - Unauthenticated Full Path Disclosure
Slug
give
Published
2024-08-19
Title
GiveWP < 3.14.2 - Unauthenticated PHP Object Injection to RCE
Slug
give
Published
2024-09-26
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.16.2 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Slug
give
Published
2024-09-27
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.16.2 - Unauthenticated PHP Object Injection
Slug
give
Published
2024-09-25
Title
GiveWP < 3.16.0 - Cross-Site Request Forgery
Slug
give
Published
2024-10-15
Title
GiveWP < 3.16.4 - Unauthenticated PHP Object Injection to Remote Code Execution
Slug
give
Published
2024-12-06
Title
Give < 3.19.0 - Reflected XSS
Slug
give
Published
2025-01-10
Title
GiveWP < 3.19.3 - Unauthenticated PHP Object Injection
Slug
give
Published
2025-01-10
Title
GiveWP < 3.19.4 - Unauthenticated PHP Object Injection
Slug
give
Published
2025-03-03
Title
GiveWP < 3.20.0 - Unauthenticated PHP Object Injection
Slug
give
Published
2025-03-14
Title
Give < 3.22.1 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function
Slug
give
Published
2025-03-21
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.22.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
give
Published
2025-06-18
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.3.1 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification
Slug
give
Published
2025-07-30
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.6.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting
Slug
give
Published
2025-08-05
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.6.1 - Unauthenticated Donor Data Exposure
Slug
give
Published
2025-08-20
Title
GiveWP < 4.6.1 - Missing Authorization to Donation Update
Slug
give
Published
2025-10-03
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.10.1 - Missing Authorization to Unauthenticated Forms-Campaign Association
Slug
give
Published
2025-10-03
Title
GiveWP < 4.10.1 - Unauthenticated Forms and Campaigns Disclosure
Slug
give
Published
2025-11-18
Title
GiveWP < 4.13.1 - Unauthenticated Stored XSS via 'name'
Slug
give
Published
2025-12-23
Title
GiveWP < 4.13.2 - Cross-Site Request Forgery