CVE-2024-9634

🗓️ 16 Oct 2024 02:05:09Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 55 Views

The GiveWP – Donation Plugin for WordPress is vulnerable to PHP Object Injection & Remote Code Executio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9634	16 Oct 202405:29	–	circl
CNNVD	WordPress plugin GiveWP – Donation Plugin and Fundraising Platform 代码问题漏洞	15 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-9634 GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution	16 Oct 202402:05	–	cvelist
NVD	CVE-2024-9634	16 Oct 202402:15	–	nvd
Patchstack	WordPress GiveWP plugin <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution vulnerability	15 Oct 202413:08	–	patchstack
Patchstack	WordPress GiveWP Plugin <= 3.16.3 is vulnerable to PHP Object Injection	15 Oct 202400:00	–	patchstack
Positive Technologies	PT-2024-39731 · WordPress · Givewp	15 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9634	5 Feb 202504:31	–	redhatcve
Vulnrichment	CVE-2024-9634 GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution	16 Oct 202402:05	–	vulnrichment
Tenable Nessus	GiveWP Plugin for WordPress < 3.16.4 Remote Code Execution	21 Oct 202400:00	–	nessus

NVD

Vulners

Vulnrichment

Node

givewp givewpRange<3.16.4wordpress

[
  {
    "vendor": "stellarwp",
    "product": "GiveWP – Donation Plugin and Fundraising Platform",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.16.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3166836/give/tags/3.16.4/includes/process-donation.php
plugins	www.plugins.trac.wordpress.org/browser/give/tags/3.16.2/src/Donations/Repositories/DonationRepository.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e

08 Apr 2026 17:17Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.22785

SSVC

CWE-502