GiveWP vulnerabilities
12 published CVEs name GiveWP among the affected products.
- Published CVEs
- 12
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 9Low 0Not scored 0
CVEs per yearBy the year they were published
- 20212
- 20222
- 20235
- 20243
Newest CVEs
- CVE-2023-41665
WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
GiveWP · GiveWP
High8.8 - CVE-2022-40211
WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability
GiveWP · GiveWP
Medium5.9 - CVE-2023-51415
WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
GiveWP · GiveWP – Donation Plugin and Fundraising Platform
Medium6.5 - CVE-2023-32513
WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection
GiveWP · GiveWP – Donation Plugin and Fundraising Platform
High7.5 - CVE-2022-40312
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)
GiveWP · GiveWP – Donation Plugin and Fundraising Platform
Medium5.5 - CVE-2023-22719
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection
GiveWP · GiveWP
Medium4.7 - CVE-2023-25450
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)
GiveWP · GiveWP – Donation Plugin and Fundraising Platform
Medium5.4 - CVE-2023-23668
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
GiveWP · GiveWP
Medium6.5 - CVE-2022-31475
WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability
GiveWP · GiveWP (WordPress plugin)
Medium5.5 - CVE-2022-28700
WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability
GiveWP · GiveWP (WordPress plugin)
Critical9.1
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)5
- CWE-1236 CSV injection1
- CWE-22 Path traversal1
- CWE-269 Improper privilege management1
- CWE-284 Improper access control1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-434 Unrestricted file upload1
- CWE-502 Deserialization of untrusted data1
- CWE-552 1
- CWE-918 Server-side request forgery (SSRF)1