Lucene search
+L

284 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.10 views

CVE-2025-66533

Improper Control of Generation of Code 'Code Injection' vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through = 4.13.1...

5.3CVSS7AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 3:03 p.m.40 views

CVE-2025-67467 WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in StellarWP GiveWP give allows Cross Site Request Forgery.This issue affects GiveWP: from n/a through = 4.13.1...

5.4CVSS0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 3:03 p.m.31 views

CVE-2025-66533 WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through = 4.13.1...

5.3CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 3:03 p.m.4 views

CVE-2025-66533 WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through = 4.13.1...

5.3CVSS6.6AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.7 views

WordPress plugin GiveWP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.4CVSS6.6AI score0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.7 views

PT-2025-50079

Cross-Site Request Forgery CSRF vulnerability in StellarWP GiveWP give allows Cross Site Request Forgery.This issue affects GiveWP: from n/a through = 4.13.1...

4.5CVSS6.9AI score0.00125EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/20 9:36 p.m.8 views

CVE-2025-13206

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS5.3AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/19 9:30 a.m.10 views

EUVD-2025-198142

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS4.9AI score0.00255EPSS
SaveExploits0References6
OSV
OSV
added 2025/11/19 8:15 a.m.7 views

CVE-2025-13206

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS5.2AI score0.00255EPSS
SaveExploits0References5
NVD
NVD
added 2025/11/19 8:15 a.m.12 views

CVE-2025-13206

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS0.00255EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/11/19 7:46 a.m.15 views

CVE-2025-13206 GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS0.00255EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/19 7:46 a.m.5 views

CVE-2025-13206 GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS5AI score0.00255EPSS
SaveExploits0References5
CVE
CVE
added 2025/11/19 7:46 a.m.26 views

CVE-2025-13206

CVE-2025-13206 affects the WordPress GiveWP – Donation Plugin and Fundraising Platform. The vulnerability is a stored cross-site scripting flaw in the name parameter present in all versions up to and including 4.13.0, caused by insufficient input sanitization and output escaping. It allows unauth...

7.2CVSS5AI score0.00255EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/19 12:00 a.m.12 views

PT-2025-47446

Name of the Vulnerable Software and Affected Versions GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.13.1 Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input...

7.2CVSS6AI score0.00255EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/11/19 12:00 a.m.8 views

WordPress plugin GiveWP – Donation Plugin and Fundraising Platform 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scriptin...

7.2CVSS5.9AI score0.00255EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/11/18 11:53 p.m.12 views

WordPress GiveWP - Donation plugin and Fundraising Platform plugin <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name' vulnerability

WordPress GiveWP - Donation plugin and Fundraising Platform plugin = 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name' vulnerability discovered by shark3y in WordPress Plugin GiveWP versions = 4.13.0...

7.2CVSS5.8AI score0.00255EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.20 views

EUVD-2021-12011

Malware in sbrugna...

6.1CVSS6.1AI score0.02145EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-11436

Malware in sbrugna...

4.8CVSS5.1AI score0.00617EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2021-11127

Malware in sbrugna...

6.1CVSS6.1AI score0.0137EPSS
SaveExploits4References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-13412

Malware in sbrugna...

5.3CVSS5.4AI score0.01881EPSS
SaveExploits0References2
Rows per page
Query Builder