EPSS
Percentile
31.8%
Reflected Cross-Site Scripting (XSS) via Donation Forms Dashboard vulnerability discovered by JrXnm in WordPress GiveWP plugin (versions <= 2.17.2).
Update the WordPress GiveWP plugin to the latest available version (at least 2.17.3).
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25100
wordpress.org/plugins/give/#developers
wpscan.com/vulnerability/fe2c02bf-207c-43da-98bd-4c85d235de8b