961 matches found
CVE-2024-8353
This post is a research article published by EQSTLab. Thanks tocuokon, who discovered this vulnerability. Introduction Further Analysis CVE-2024-5932 EQST Insight R&TPDF file. https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 Arbitrary...
CVE-2024-12877
CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via...
GiveWP <= 2.9.7 - Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress versions before 2.10.0 is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in the admin Donors page. id: CVE-2021-24213 info: name: GiveWP = 2.9.7 - Cross-Site Scripting author: Shivam Kamboj severity: medium...
GiveWP - Missing Authorization to Settings Update
GiveWP plugin through 2.5.9 for WordPress contains an unauthenticated settings change caused by insecure access in includes/gateways/stripe/includes/admin/admin-actions.php, letting attackers modify settings without authentication, exploit requires no authentication. id: CVE-2020-20627 info: name...
GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...
GiveWP <= 4.16.7.1 - Remote Code Execution
GiveWP = 4.16.7.1 contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting attackers perform object injection remotely, exploit requires crafted input id: CVE-2026-82222 info: name: GiveWP = 4.16.7.1 - Remote Code Execution author: 0xAkoko,pdteam...
CVE-2026-82222
⚡ GHOSTLYR00T - GiveWP RCE Exploit Framework CVE-2026-82222 - GiveWP Unauthenticated RCE Exploit Mass Scanner + Auto-Detection + Multi-Threading + Interactive Shell 📋 Daftar Isi | Table of Contents Overview Fitur Utama | Key Features Vulnerability Details Instalasi | Installation Parameter Lengka...
CVE-2026-97066
Unauthenticated Insecure Direct Object References IDOR in GiveWP = 4.16.9 versions...
CVE-2026-96834
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
CVE-2026-96830
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.9 versions...
EUVD-2026-89892
Unauthenticated Insecure Direct Object References IDOR in GiveWP = 4.16.9 versions...
CVE-2026-97066
The GiveWP plugin for WordPress, versions
CVE-2026-97066 WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in GiveWP = 4.16.9 versions...
CVE-2026-97066 WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in GiveWP = 4.16.9 versions...
CVE-2026-96834
The WordPress GiveWP plugin versions
CVE-2026-96834 WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
EUVD-2026-89886
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
CVE-2026-96834 WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...