GiveWP – Donation Plugin and Fundraising Platform

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   GiveWP – Donation Plugin and Fundraising Platform

Information

Software Type Plugin
Software Slug give (view on wordpress.org)
Software Status Active
Software Author webdevmattcrom
Software Website givewp.com
Software Downloads 5,121,717
Software Active Installs 100,000
Software Record Last Updated May 24, 2023

Showing 1-20 of 31 vulnerabilities

GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection
6.6
CVE-2023-32513
May 10, 2023
Researcher: Rafie Muhammad
GiveWP <= 2.25.2 - Cross-Site Request Forgery
4.3
CVE ID Unknown
Mar 23, 2023
Researchers:
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note
5.3
CVE ID Unknown
Mar 23, 2023
Researchers:
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
5.3
CVE ID Unknown
Mar 23, 2023
Researchers:
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
5.4
CVE-2023-23672
Mar 10, 2023
Researcher: Rafshanzani Suhada
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2022-40211
Mar 10, 2023
Researcher: Rafie Muhammad
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
4.3
CVE ID Unknown
Mar 8, 2023
Researchers:
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
6.4
CVE-2023-23668
Mar 8, 2023
Researcher: Rafshanzani Suhada
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
4.1
CVE-2022-40312
Mar 8, 2023
Researcher: Rafie Muhammad
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
8.3
CVE-2023-22719
Mar 8, 2023
Researcher: Rafshanzani Suhada
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
5.4
CVE ID Unknown
Mar 8, 2023
Researchers:
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
6.1
CVE ID Unknown
Mar 8, 2023
Researchers:
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
4.3
CVE ID Unknown
Mar 8, 2023
Researchers:
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
Jan 19, 2023
Researchers:
GiveWP <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2022-4448
Jan 19, 2023
Researcher: Lana Codes
GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation
5.5
CVE-2022-28700
Jul 12, 2022
Researcher: Rafie Muhammad
GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-2215
Jul 11, 2022
Researcher: Raad Haddad
GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery
4.3
CVE-2022-2260
Jul 8, 2022
Researcher: Raad Haddad
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
5.3
CVE-2022-2117
Jun 17, 2022
Researcher: Kane Gamble (Blackfoot UK)
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool
4.8
CVE-2022-0252
Jan 18, 2022
Researcher: ZhongFu Su
Title CVE ID CVSS Researchers Date
GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection CVE-2023-32513 6.6 Rafie Muhammad May 10, 2023
GiveWP <= 2.25.2 - Cross-Site Request Forgery 4.3 March 23, 2023
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note 5.3 March 23, 2023
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note 5.3 March 23, 2023
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion CVE-2023-23672 5.4 Rafshanzani Suhada March 10, 2023
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2022-40211 6.4 Rafie Muhammad March 10, 2023
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush 4.3 March 8, 2023
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode CVE-2023-23668 6.4 Rafshanzani Suhada March 8, 2023
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler CVE-2022-40312 4.1 Rafie Muhammad March 8, 2023
GiveWP <= 2.25.1 - Unauthenticated CSV Injection CVE-2023-22719 8.3 Rafshanzani Suhada March 8, 2023
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action 5.4 March 8, 2023
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown 6.1 March 8, 2023
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save 4.3 March 8, 2023
GiveWP <= 2.23.2 - Unauthenticated SQL Injection 9.8 January 19, 2023
GiveWP <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2022-4448 6.4 Lana Codes January 19, 2023
GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation CVE-2022-28700 5.5 Rafie Muhammad July 12, 2022
GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-2215 5.5 Raad Haddad July 11, 2022
GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery CVE-2022-2260 4.3 Raad Haddad July 8, 2022
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure CVE-2022-2117 5.3 Kane Gamble (Blackfoot UK) June 17, 2022
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool CVE-2022-0252 4.8 ZhongFu Su January 18, 2022

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation