Filter
-Infinity
0

GiveWP Donation PluginGiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure

First published (updated )

GiveWP Donation PluginGive <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

7.5
First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection

First published (updated )

Givenu Givenu GiveWordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

EPSS
0.04%
First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GiveWPWordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability

First published (updated )

Givenu Givenu GiveWordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability

First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution

EPSS
0.06%
First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

EPSS
0.14%
First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter

7.2
EPSS
0.08%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Givenu Givenu GiveWordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability

8.8
First published (updated )

Givenu Givenu GiveGiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure

First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update

First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure

First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion

First published (updated )

GiveWPWordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions

EPSS
0.05%
First published (updated )

Givenu Givenu GiveWordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

Givenu Givenu GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Givenu Givenu GiveWordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

8.8
First published (updated )

Givenu Givenu GiveXSS

First published (updated )

Givenu Givenu GiveWordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability

First published (updated )

GiveWP Donation PluginXSS

First published (updated )

Givenu Givenu GiveWordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GiveWPWordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

Givenu Givenu GiveWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

First published (updated )

Givenu Givenu GiveGiveWP < 2.24.1 - Unauthenticated SQLi

First published (updated )

Givenu Givenu GiveCSRF

First published (updated )

Givenu Givenu GiveCSRF

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203