Filter
Software
GiveWPWordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability
9.8
EPSS
0.04%
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection
10
EPSS
0.14%
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
7.2
EPSS
0.08%
First published (updated )
GiveWP GiveWordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
8.8
First published (updated )
GiveWP GiveGiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update
6.5
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure
5.3
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution
10
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
5.4
First published (updated )
GiveWP GiveGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions
5.4
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GiveWP GiveWordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
First published (updated )
GiveWPWordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability
5.9
First published (updated )
GiveWP GiveWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GiveWP GiveWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection
9.8
First published (updated )
GiveWP GiveWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)
6.5
First published (updated )
GiveWP GiveWordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GiveWP GiveWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
GiveWP GiveWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
6.5
First published (updated )
GiveWP GiveGiveWP < 2.24.0 - Contributor+ Stored XSS
5.4
First published (updated )
GiveWP GiveGiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GiveWP GiveWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability
9.1
First published (updated )
GiveWP GiveWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability
5.5
First published (updated )
GiveWP GiveGive < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
6.1
First published (updated )
GiveWP GiveGive < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.