Login Request a demo
GI
Product
GiveWP
by GiveWP · last CVE Nov 19, 2025
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities61In the news0Timeline
Severity mix
Critical 12High 8Medium 41Low 0
Severity
All severities61Critical12High8Medium41Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GiveWP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47315
8.8
0%
Sep 25
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
Affected: before 3.16.0
CVE-2023-41665
8.8
1%
May 17
WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
Affected: through 2.33.0
CVE-2023-25450
8.8
0%
Jun 15
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 2.25.2
CVE-2025-2025
7.5
1%
Mar 15
Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function
Affected: before 3.22.1
CVE-2019-20360
7.5
2%
Jan 8
A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information (PII)…
Affected: before 2.5.5
CVE-2024-9130
7.2
1%
Sep 27
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Affected: before 3.16.2
CVE-2024-30229
7.2
1%
Mar 28
WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
Affected: before 3.5.0
CVE-2022-28700
7.2
2%
Jul 21
WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability
Affected: before 2.21.0
Showing 8