Login Request a demo
GI
Product
GiveWP
by StellarWP · last CVE Apr 29, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 4Low 0
Severity
All severities8Critical2High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GiveWP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22777
9.8
1%
Jan 13
WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability
Affected: through 3.19.3
CVE-2023-47183
9.8
0%
Jan 2
WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability
Affected: through 2.33.1
CVE-2024-47315
8.8
0%
Sep 25
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 3.15.1
CVE-2024-30229
7.2
1%
Mar 28
WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
Affected: through 3.4.2
CVE-2024-35679
6.1
0%
Jun 8
WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 3.12.0
CVE-2024-27987
6.1
0%
Mar 15
WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 3.3.1
CVE-2025-67467
5.4
0%
Dec 9
WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 4.13.1
CVE-2026-42642
5.3
0%
Apr 29
WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability
Affected: through 4.14.5
Showing 8