799 matches found
CVE-2020-20627
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change...
Code injection
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change...
CVE-2020-20627
The CVE-2020-20627 case concerns GiveWP for WordPress (up to version 2.5.9) where the file includes/gateways/stripe/includes/admin/admin-actions.php allows unauthenticated changes to plugin settings due to insecure access. This is evidenced by connected reports (Nuclei template) describing an una...
CVE-2020-20627
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change...
PT-2020-15274
Name of the Vulnerable Software and Affected Versions GiveWP plugin versions prior to 2.5.10 Description The issue allows unauthenticated changes to settings. This is due to a problem in the includes/gateways/stripe/includes/admin/admin-actions.php file. Recommendations For GiveWP plugin versions...
GiveWp < 2.5.5 - Authentication Bypass
The weakness allowed unauthenticated users to bypass API authentication methods and potentially access personally identifiable user information PII like names, addresses, IP addresses, and email addresses which should not be publicly accessible...
WordPress GiveWp plugin <= 2.5.4 - Authentication Bypass
The weakness allows unauthenticated users to bypass API authentication methods and potentially access personally identifiable user information PII like names, addresses, IP addresses, and email addresses. Solution Update the plugin to the latest version...
WordPress GiveWP Plugin < 2.4.7 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113524";...
WordPress GiveWP Plugin <= 2.5.0 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113482";...
PT-2019-14046 · Givewp +2 · Givewp +1
Name of the Vulnerable Software and Affected Versions: give plugin versions prior to 2.4.7 Description: The issue allows for XSS via a donor name. Recommendations: For versions prior to 2.4.7, update to version 2.4.7 or later to resolve the issue...
CVE-2019-13578
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
CVE-2019-13578
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
Sql injection
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
CVE-2019-13578
The CVE-2019-13578 entry affects the WordPress plugin Impress GiveWP Give (GiveWP) up to version 2.5.0, with the vulnerability located in includes/payments/class-payments-query.php. Exploitation allows remote execution of arbitrary SQL commands, implying a SQL injection affecting authentication/a...
CVE-2019-13578
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
Give <= 2.5.0 - SQL Injection
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php or...
Give < 2.4.7 - Stored XSS
The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin was affected by a Stored XSS security vulnerability...