CVE-2025-22777

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through = 3.19.3...

CVE-2025-22777 WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through = 3.19.3...

CVE-2025-22777 WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through = 3.19.3...

CVE-2025-22777

CVE-2025-22777 affects the GiveWP WordPress plugin, vulnerable in versions up to 3.19.3 due to Deserialization of Untrusted Data (PHP Object Injection). The issue enables object injection via the plugin’s logic, with high-severity impact (per reports) including potential remote code execution. A ...

CVE-2025-22777

creationtimestamp| type| source ---|---|--- 2025-01-12 02:00:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfj4t5mkxy2m 2025-01-12 04:06:22+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfjdtjnyzk27 2025-01-12 05:12:37+00:00| seen|...

PT-2025-1320 · Givewp · Givewp

The software that is vulnerable is the GiveWP WordPress Plugin, specifically versions from n/a through 3.19.3. The vulnerability is a Deserialization of Untrusted Data vulnerability, also known as an Unauthenticated PHP Object Injection, which allows attackers to take control of websites. This...