WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
give
Published
2026-07-10
Title
GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
Slug
give
Published
2026-07-13
Title
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
Slug
give
Published
2026-07-13
Title
GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass
Slug
give
Published
2026-07-15
Title
GiveWP < 4.16.4 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting
Slug
give
Published
2026-07-22
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.4 - Cross-Site Request Forgery
Slug
give
Published
2026-07-27
Title
GiveWP < 4.16.4 - Unauthenticated Stored Cross-Site Scripting
Slug
give
Published
2026-07-31
Title
GiveWP < 4.16.5.1 - Unauthenticated Stored XSS
Slug
give
Published
2026-08-12
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-12
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Authenticated (Donor+) Stored Cross-Site Scripting
Slug
give
Published
2026-08-14
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-14
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-27
Title
GiveWP < 4.14.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
give
Published
2026-08-28
Title
GiveWP < 4.16.7.2 - Unauthenticated PHP Object Injection to RCE
Slug
give
Published
2026-09-24
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.17.0 - Authenticated (Subscriber+) Information Exposure
Slug
give
Published
2026-09-24
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.17.0 - Unauthenticated Insecure Direct Object Reference
Slug
give
Published
2026-09-24
Title
GiveWP < 4.17.0 - Unauthenticated Stored XSS
Slug
give
Published
2026-09-24
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.17.0 - Unauthenticated User Impersonation
Slug
give
Published
2026-10-05
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
give
Published
2026-09-14
Title
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
Slug
give
Published
2026-10-05
Title
GiveWP < 4.18.0 - Unauthenticated Privilege Escalation
Slug
give
Published
2026-10-05
Title
GiveWP < 4.18.0 - Unauthenticated Stored XSS
Slug
give
Published
2026-10-08
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.18.0.1 - Missing Authorization
Slug
give
Published
2026-09-18
Title
GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name
Slug
give
Published
2026-10-02
Title
GiveWP < 4.16.9 - Unauthenticated Payment Bypass
Slug
give
Published
2026-10-09
Title
GiveWP < 4.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes