797 matches found
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Udin Chan in WordPress Plugin GiveWP versions = 4.16.7.1...
EUVD-2026-67649
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'giveform' shortcode in all versions up to, and including, 4.14.4. This is due to insufficient input sanitization and output escaping on the continuebuttontitle and...
CVE-2026-5510
GiveWP – Donation Plugin and Fundraising Platform for WordPress is vulnerable to Stored Cross-Site Scripting via the give_form shortcode in all versions up to and including 4.14.4 . The root cause is insufficient output escaping on the continue_button_title and display_style shortcode attributes,...
CVE-2026-5510 GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'giveform' shortcode in all versions up to, and including, 4.14.4. This is due to insufficient input sanitization and output escaping on the continuebuttontitle and...
WordPress GiveWP plugin <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by daroo in WordPress Plugin GiveWP versions = 4.14.4...
PT-2026-83084
Name of the Vulnerable Software and Affected Versions GiveWP versions prior to 4.16.7.2 Description An issue involving the deserialization of untrusted data allows for PHP object injection, which can be chained from an unauthenticated starting point to achieve remote code execution. The attack...
CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC-
CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC- Questo repository contiene una Proof of Concept in lavorazione per CVE-2025-22777 che interessa il plugin GiveWP per WordPress. Le cose potrebbero cambiare, rompersi o migliorare nel tempo. Per prima cosa, clona questo repository. Sul t...
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-73352
The WordPress GiveWP donation plugin (versions ≤ 4.16.5.1) has an unauthenticated broken access control flaw (CVSS 6.5) discovered by Dthangws, allowing unauthorized read/write of data. Upgrade to a newer GiveWP version. PatchStack advisory: https://patchstack.com/database/wordpress/plugin/give/v...
EUVD-2026-60779
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-73352 WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-73348
GiveWP WordPress plugin versions before 4.16.6 have an unauthenticated broken access control flaw, allowing network-based attackers with no credentials to access restricted functionality (CVSS 6.5). Upgrade to 4.16.6 or later. No in-the-wild exploitation reported. Details: https://patchstack.com/...
CVE-2026-73348 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...