givewp Vulnerability Advisory Catalog

Total 61 security vulnerabilities recorded for givewp software and firmware.

← Back to All Vendors
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜nameโ€™ parameter in al...

๐Ÿ“… 2025-11-19
CVSS 7.2 Dossier →
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil...

๐Ÿ“… 2025-10-04
CVSS 5.3 Dossier →
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including,...

๐Ÿ“… 2025-10-04
CVSS 6.5 Dossier →
CVE-2025-7221 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil...

๐Ÿ“… 2025-08-21
CVSS 4.3 Dossier →
CVE-2025-8620 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including,...

๐Ÿ“… 2025-08-06
CVSS 5.3 Dossier →
CVE-2025-7205 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter ...

๐Ÿ“… 2025-07-31
CVSS 5.4 Dossier →
CVE-2025-4571 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insuf...

๐Ÿ“… 2025-06-19
CVSS 5.4 Dossier →
CVE-2025-2331 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and ...

๐Ÿ“… 2025-03-22
CVSS 5.3 Dossier →
CVE-2025-2025 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability ch...

๐Ÿ“… 2025-03-15
CVSS 6.5 Dossier →
CVE-2025-0912 CRITICAL
Component: givewp

The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.4 via deserialization of un...

๐Ÿ“… 2025-03-04
CVSS 9.8 Dossier →
CVE-2025-22777 CRITICAL
Component: givewp

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through <= 3.19.3...

๐Ÿ“… 2025-01-13
CVSS 9.8 Dossier →
CVE-2024-12877 CRITICAL
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...

๐Ÿ“… 2025-01-11
CVSS 9.8 Dossier →
Component: givewp

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1....

๐Ÿ“… 2025-01-02
CVSS 5.4 Dossier →
Component: givewp

Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect...

๐Ÿ“… 2025-01-02
CVSS 5.3 Dossier →
Component: givewp

The GiveWP WordPress plugin before 3.19.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros...

๐Ÿ“… 2024-12-27
CVSS 4.8 Dossier →
CVE-2024-9634 CRITICAL
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...

๐Ÿ“… 2024-10-16
CVSS 9.8 Dossier →
CVE-2024-8353 CRITICAL
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...

๐Ÿ“… 2024-09-28
CVSS 9.8 Dossier →
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the โ€˜orderโ€™ parameter in all ...

๐Ÿ“… 2024-09-27
CVSS 7.2 Dossier →
Component: givewp

Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.15.1....

๐Ÿ“… 2024-09-25
CVSS 5.4 Dossier →
CVE-2024-6551 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including,...

๐Ÿ“… 2024-08-29
CVSS 5.3 Dossier →
CVE-2024-5941 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing ...

๐Ÿ“… 2024-08-20
CVSS 5.4 Dossier →
CVE-2024-5940 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil...

๐Ÿ“… 2024-08-20
CVSS 6.5 Dossier →
CVE-2024-5939 MEDIUM
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability ch...

๐Ÿ“… 2024-08-20
CVSS 5.3 Dossier →
CVE-2024-5932 CRITICAL
Component: givewp

The GiveWP โ€“ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...

๐Ÿ“… 2024-08-20
CVSS 10.0 Dossier →
Page 1 of 3 (61 Total Records)