Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

GiveWP vulnerabilities

12 published CVEs name GiveWP among the affected products.

Published CVEs
12
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 2Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20212
  2. 20222
  3. 20235
  4. 20243

Newest CVEs

  • CVE-2023-41665

    WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

    GiveWP · GiveWP

    High8.8
  • CVE-2022-40211

    WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability

    GiveWP · GiveWP

    Medium5.9
  • CVE-2023-51415

    WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

    GiveWP · GiveWP – Donation Plugin and Fundraising Platform

    Medium6.5
  • CVE-2023-32513

    WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection

    GiveWP · GiveWP – Donation Plugin and Fundraising Platform

    High7.5
  • CVE-2022-40312

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)

    GiveWP · GiveWP – Donation Plugin and Fundraising Platform

    Medium5.5
  • CVE-2023-22719

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection

    GiveWP · GiveWP

    Medium4.7
  • CVE-2023-25450

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

    GiveWP · GiveWP – Donation Plugin and Fundraising Platform

    Medium5.4
  • CVE-2023-23668

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)

    GiveWP · GiveWP

    Medium6.5
  • CVE-2022-31475

    WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

    GiveWP · GiveWP (WordPress plugin)

    Medium5.5
  • CVE-2022-28700

    WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

    GiveWP · GiveWP (WordPress plugin)

    Critical9.1