WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
give
Published
2026-10-30
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.19.0.2 - Missing Authorization
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route
Slug
give
Published
2026-10-23
Title
GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses
Slug
give-donation-modules-for-divi
Published
2025-02-12
Title
Give – Divi Donation Modules < 2.0.1 - Sensitive Information Dislcosure
Slug
give-tributes
Published
2026-09-21
Title
Give Tributes < 2.3.1.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter
Slug
giveasap
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
giveasap
Published
2021-05-09
Title
Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
giveasap
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Admin+ Stored XSS
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Editor+ Stored Cross-Site Scripting
Slug
giveasap
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
giveasap
Published
2023-11-09
Title
Simple Giveaways < 2.46.1 - CSRF
Slug
giveasap
Published
2025-03-27
Title
Simple Giveaways < 2.48.2 - Authenticated (Contributor+) SQL Injection
Slug
giveasap
Published
2025-05-07
Title
Simple Giveaways <= 2.48.2 - Cross-Site Request Forgery
Slug
giveaway
Published
2021-07-20
Title
Giveaway <= 1.2.2 - Authenticated SQL Injection
Slug
giveaway-boost
Published
2024-10-17
Title
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection
Slug
giveaways-contests-by-promosimple
Published
2025-01-16
Title
Giveaways and Contests by PromoSimple <= 1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
giveaways-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
giveaways-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gixaw-chat
Published
2024-08-22
Title
Gixaw Chat <= 1.0 - Stored XSS via CSRF