Givewp vulnerabilities

Products

• Givewp 61
• – Donation Plugin And Fundraising Platform 6
• (wordpress Plugin) 2

Newest

• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name' CVE-2025-13206 7.2 HighNovember 19, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association CVE-2025-11228 5.3 MediumOctober 4, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure CVE-2025-11227 6.5 MediumOctober 4, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update CVE-2025-7221 4.3 MediumAugust 21, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure CVE-2025-8620 5.3 MediumAugust 6, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting CVE-2025-7205 5.4 MediumJuly 31, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification CVE-2025-4571 5.4 MediumJune 19, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2025-2331 5.3 MediumMarch 22, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function CVE-2025-2025 6.5 MediumMarch 15, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection CVE-2025-0912 9.8 CriticalMarch 4, 2025
• givewp WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability CVE-2025-22777 Public exploit 9.8 CriticalJanuary 13, 2025
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection CVE-2024-12877 Public exploit 9.8 CriticalJanuary 11, 2025
• givewp WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability CVE-2023-23672 5.4 MediumJanuary 2, 2025
• givewp WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability CVE-2023-47183 5.3 MediumJanuary 2, 2025
• givewp Give < 3.19.0 - Reflected XSS CVE-2024-11921 4.8 MediumDecember 27, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 more GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution CVE-2024-9634 9.8 CriticalOctober 16, 2024
• givew donation plugin and fundraising platform, givewp, stellarwp givewp – donation plugin and fundraising platform +2 more GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection CVE-2024-8353 Public exploit EPSS 32.4% 9.8 CriticalSeptember 28, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter CVE-2024-9130 7.2 HighSeptember 27, 2024
• givewp WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-47315 5.4 MediumSeptember 25, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure CVE-2024-6551 5.3 MediumAugust 29, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 more GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update CVE-2024-5940 6.5 MediumAugust 20, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure CVE-2024-5939 5.3 MediumAugust 20, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution CVE-2024-5932 Public exploit EPSS 76.8% 10.0 CriticalAugust 20, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion CVE-2024-5941 5.4 MediumAugust 20, 2024
• givewp WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability CVE-2024-37099 10.0 CriticalAugust 19, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions CVE-2024-5977 5.4 MediumJuly 19, 2024
• givewp WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-35679 7.1 HighJune 8, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3714 6.4 MediumMay 18, 2024
• givewp WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability CVE-2023-41665 8.8 HighMay 17, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1957 6.4 MediumApril 13, 2024
• givewp WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability CVE-2022-40211 5.9 MediumApril 12, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1424 6.4 MediumApril 9, 2024
• givewp WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability CVE-2024-30229 8.0 HighMarch 28, 2024
• givewp WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-27987 7.1 HighMarch 15, 2024
• givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 more WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51415 6.5 MediumFebruary 10, 2024
• givewp GiveWP < 2.24.1 - Unauthenticated SQLi CVE-2023-0224 9.8 CriticalJanuary 16, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation CVE-2023-4247 5.4 MediumJanuary 11, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation CVE-2023-4246 4.3 MediumJanuary 11, 2024
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion CVE-2023-4248 5.4 MediumJanuary 11, 2024
• givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 more WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection CVE-2023-32513 7.5 HighDecember 28, 2023
• givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 more WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF) CVE-2022-40312 5.5 MediumDecember 18, 2023
• givewp WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection CVE-2023-22719 4.7 MediumNovember 7, 2023
• givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 more WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25450 5.4 MediumJune 15, 2023
• givewp WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23668 6.5 MediumMay 8, 2023
• givewp GiveWP < 2.24.0 - Contributor+ Stored XSS CVE-2022-4448 5.4 MediumFebruary 13, 2023
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - DoS via CSRF CVE-2022-2260 6.5 MediumAugust 1, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting CVE-2022-2215 4.8 MediumAugust 1, 2022
• givewp, givewp (wordpress plugin) +1 more WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability CVE-2022-31475 5.5 MediumJuly 21, 2022
• givewp, givewp (wordpress plugin) +1 more WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability CVE-2022-28700 9.1 CriticalJuly 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure CVE-2022-2117 5.3 MediumJuly 18, 2022
• Show olderLoading…