CVE-2019-13578

A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...

Sql injection

A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...

CVE-2019-13578

The CVE-2019-13578 entry affects the WordPress plugin Impress GiveWP Give (GiveWP) up to version 2.5.0, with the vulnerability located in includes/payments/class-payments-query.php. Exploitation allows remote execution of arbitrary SQL commands, implying a SQL injection affecting authentication/a...

Give < 2.4.7 - Stored XSS

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin was affected by a Stored XSS security vulnerability...