WordPress Plugin Vulnerabilities

Give - Cross-Site Scripting (XSS)

Description

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
give
Fixed in 0.8.5

References

URL
https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html
URL
https://github.com/WordImpress/Give/commit/b88fea00999534355e0a124d0b7c4d0cee164d39

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
2b655941-78a7-46f5-a937-2fb96306e8be

Timeline

Publicly Published
2015-04-20 (about 10 years ago)
Added
2015-04-20 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
NextGEN Gallery <= 1.5.1 - Cross-Site Scripting (XSS)
Published
2023-08-30
Title
Reservation.Studio widget < 1.0.12 - Admin+ Stored XSS
Published
2021-06-30
Title
Profile Builder < 3.4.8 - Authenticated Stored XSS
Published
2025-09-05
Title
WP Publication Archive <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2017-04-11
Title
Login with AJAX Plugin <= 3.1.6 - Cross-Site Scripting (XSS)