Log in Start free

GiveWP

Products

ProductCVEsExploitedLatest
GiveWP – Donation Plugin and Fundraising Platform6–Feb 10, 2024
GiveWP4–May 17, 2024
GiveWP (WordPress plugin)2–Jul 21, 2022

Exploited and recent CVEs

  • CVE-2023-41665 High 8.8 WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability 0.8%
  • CVE-2022-40211 Medium 5.9 WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability 0.4%
  • CVE-2023-51415 Medium 6.5 WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-32513 High 7.5 WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection 0.6%
  • CVE-2022-40312 Medium 5.5 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF) 0.4%
  • CVE-2023-22719 Medium 4.7 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection 0.6%
  • CVE-2023-25450 Medium 5.4 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-23668 Medium 6.5 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-31475 Medium 5.5 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability 0.9%
  • CVE-2022-28700 Critical 9.1 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability 2.1%
  • CVE-2021-24315 Unrated Give WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS) 0.7%
  • CVE-2021-24213 Unrated GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS) 1.4%