WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
give
Published
2023-03-10
Title
GiveWP < 2.25.2 - Author+ Stored Cross-Site Scripting
Slug
give
Published
2023-03-10
Title
GiveWP < 2.25.2 - Contributor+ Arbitrary Content Deletion
Slug
give
Published
2023-03-23
Title
GiveWP < 2.25.3 - Cross-Site Request Forgery
Slug
give
Published
2023-03-08
Title
GiveWP < 2.25.2 - Contributor+ Stored XSS
Slug
give
Published
2023-08-31
Title
Give - Donation Plugin < 2.33.1 - Authenticated(Give Manager+) Privilege Escalation
Slug
give
Published
2023-10-31
Title
GiveWP < 2.33.2 - Missing Authorization via handleBeforeGateway
Slug
give
Published
2023-10-31
Title
GiveWP < 2.33.4 - Cross-Site Request Forgery to Stripe Integration Deletion
Slug
give
Published
2023-10-31
Title
GiveWP < 2.33.4 - Cross-Site Request Forgery to plugin deactivation
Slug
give
Published
2023-10-31
Title
GiveWP < 2.33.4 - Cross-Site Request Forgery to plugin installation
Slug
give
Published
2024-01-19
Title
GiveWP < 3.3.0 - Contributor+ Stored XSS
Slug
give
Published
2024-03-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.6.0 - Contributor+ Stored XSS
Slug
give
Published
2024-03-15
Title
GiveWP < 3.4.0 - Reflected Cross-Site Scripting
Slug
give
Published
2024-04-12
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.7.0 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
give
Published
2024-04-26
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.5.0 - Authenticated (GiveWP Manager+) PHP Object Injection
Slug
give
Published
2024-05-17
Title
GiveWP < 3.11.0 - Contributor+ Stored XSS
Slug
give
Published
2024-06-06
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.12.1 - Reflected Cross-Site Scripting
Slug
give
Published
2024-07-18
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.2 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Missing Authorization to Limited Information Exposure
Slug
give
Published
2024-08-19
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.14.0 - Missing Authorization to Unauthenticated Event Settings Update
Slug
give
Published
2024-08-28
Title
GiveWP < 3.16.0 - Unauthenticated Full Path Disclosure
Slug
give
Published
2024-08-19
Title
GiveWP < 3.14.2 - Unauthenticated PHP Object Injection to RCE
Slug
give
Published
2024-09-26
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.16.2 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Slug
give
Published
2024-09-27
Title
GiveWP – Donation Plugin and Fundraising Platform < 3.16.2 - Unauthenticated PHP Object Injection
Slug
give
Published
2024-09-25
Title
GiveWP < 3.16.0 - Cross-Site Request Forgery