GI
Product
GiveWP
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 8Medium 41Low 0
Watch
Add GiveWP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2117 | 5.3 | Jul 18 | GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure Affected: through 2.20.2 |
| CVE-2020-20627 | 5.3 | Aug 31 | The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change Affected: through 2.5.9 |
| CVE-2022-31475 | 4.9 | Jul 21 | WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability Affected: before 2.21.0 |
| CVE-2024-11921 | 4.8 | Dec 27 | Give < 3.19.0 - Reflected XSS Affected: before 3.19.0 |
| CVE-2022-40211 | 4.8 | Apr 12 | WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability Affected: through 2.25.1 |
| CVE-2022-2215 | 4.8 | Aug 1 | GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting Affected: before 2.21.3 |
| CVE-2021-24524 | 4.8 | Aug 23 | The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users… Affected: before 2.12.0 |
| CVE-2021-24315 | 4.8 | May 17 | The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo… Affected: before 2.10.4 |
| CVE-2025-7221 | 4.3 | Aug 21 | GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update Affected: before 4.6.1 |
| CVE-2023-4246 | 4.3 | Jan 11 | GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation Affected: through 2.33.3 |
| CVE-2023-4248 | 4.3 | Jan 11 | GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion Affected: through 2.33.3 |