WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
give
Published
2025-12-23
Title
GiveWP < 4.13.2 - Cross-Site Request Forgery
Slug
give
Published
2026-01-08
Title
GiveWP < 4.13.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
give
Published
2026-04-21
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.14.3 - Reflected Cross-Site Scripting
Slug
give
Published
2026-03-02
Title
GiveWP < 4.14.6 - Missing Authorization
Slug
give
Published
2026-05-16
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.14.6 - Unauthenticated Stored Cross-Site Scripting
Slug
give
Published
2026-06-30
Title
GiveWP < 4.15.4 - Cross-Site Request Forgery
Slug
give
Published
2026-07-01
Title
GiveWP < 4.16.2 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form
Slug
give
Published
2026-06-30
Title
GiveWP < 4.16.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute
Slug
give
Published
2026-07-10
Title
GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
Slug
give
Published
2026-07-13
Title
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
Slug
give
Published
2026-07-13
Title
GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass
Slug
give
Published
2026-07-15
Title
GiveWP < 4.16.4 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting
Slug
give
Published
2026-07-22
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.4 - Cross-Site Request Forgery
Slug
give
Published
2026-07-27
Title
GiveWP < 4.16.4 - Unauthenticated Stored Cross-Site Scripting
Slug
give
Published
2026-07-31
Title
GiveWP < 4.16.5.1 - Unauthenticated Stored XSS
Slug
give
Published
2026-08-12
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-12
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Authenticated (Donor+) Stored Cross-Site Scripting
Slug
give
Published
2026-08-14
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-14
Title
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
Slug
give
Published
2026-08-27
Title
GiveWP < 4.14.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
give
Published
2026-08-28
Title
GiveWP < 4.16.7.2 - Unauthenticated PHP Object Injection to RCE
Slug
give-donation-modules-for-divi
Published
2025-02-12
Title
Give – Divi Donation Modules < 2.0.1 - Sensitive Information Dislcosure
Slug
giveasap
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
giveasap
Published
2021-05-09
Title
Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
giveasap
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius