Skip to content

Stellarwp Givewp vulnerabilities

givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object InjectionCVE-2025-09129.8 CriticalMarch 4, 2025
givewpWordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerabilityCVE-2025-22777Public exploit9.8 CriticalJanuary 13, 2025
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object InjectionCVE-2024-12877Public exploit9.8 CriticalJanuary 11, 2025
givewpWordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerabilityCVE-2023-236725.4 MediumJanuary 2, 2025
givewpWordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerabilityCVE-2023-471835.3 MediumJanuary 2, 2025
givewpGive < 3.19.0 - Reflected XSSCVE-2024-119214.8 MediumDecember 27, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-96349.8 CriticalOctober 16, 2024
givew donation plugin and fundraising platform, givewp, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object InjectionCVE-2024-8353Public exploitEPSS 32.6%9.8 CriticalSeptember 28, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order ParameterCVE-2024-91307.2 HighSeptember 27, 2024
givewpWordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-473155.4 MediumSeptember 25, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 3.15.1 - Unauthenticated Full Path DisclosureCVE-2024-65515.3 MediumAugust 29, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings UpdateCVE-2024-59406.5 MediumAugust 20, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information ExposureCVE-2024-59395.3 MediumAugust 20, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-5932Public exploitEPSS 76.8%10.0 CriticalAugust 20, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File DeletionCVE-2024-59415.4 MediumAugust 20, 2024
givewpWordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerabilityCVE-2024-3709910.0 CriticalAugust 19, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post ActionsCVE-2024-59775.4 MediumJuly 19, 2024
givewpWordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-356797.1 HighJune 8, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-37146.4 MediumMay 18, 2024
givewpWordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerabilityCVE-2023-416658.8 HighMay 17, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-19576.4 MediumApril 13, 2024
givewpWordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerabilityCVE-2022-402115.9 MediumApril 12, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14246.4 MediumApril 9, 2024
givewpWordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerabilityCVE-2024-302298.0 HighMarch 28, 2024
givewpWordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-279877.1 HighMarch 15, 2024
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-514156.5 MediumFebruary 10, 2024
givewpGiveWP < 2.24.1 - Unauthenticated SQLiCVE-2023-02249.8 CriticalJanuary 16, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivationCVE-2023-42475.4 MediumJanuary 11, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installationCVE-2023-42464.3 MediumJanuary 11, 2024
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration DeletionCVE-2023-42485.4 MediumJanuary 11, 2024
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object InjectionCVE-2023-325137.5 HighDecember 28, 2023
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2022-403125.5 MediumDecember 18, 2023
givewpWordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV InjectionCVE-2023-227194.7 MediumNovember 7, 2023
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254505.4 MediumJune 15, 2023
givewpWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-236686.5 MediumMay 8, 2023
givewpGiveWP < 2.24.0 - Contributor+ Stored XSSCVE-2022-44485.4 MediumFebruary 13, 2023
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - DoS via CSRFCVE-2022-22606.5 MediumAugust 1, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - Admin+ Stored Cross-Site ScriptingCVE-2022-22154.8 MediumAugust 1, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information DisclosureCVE-2022-21175.3 MediumJuly 18, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Import ToolCVE-2022-02526.1 MediumFebruary 21, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms DashboardCVE-2021-251006.1 MediumFebruary 21, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Unauthenticated Reflected Cross-Site ScriptingCVE-2021-250996.1 MediumFebruary 21, 2022
givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.12.0 - Authenticated Stored XSSCVE-2021-245244.8 MediumAugust 23, 2021
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGive WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-243154.8 MediumMay 17, 2021
givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)CVE-2021-242136.1 MediumApril 12, 2021