GiveWP – Donation Plugin and Fundraising Platform vulnerabilities

Product

GiveWP – Donation Plugin and Fundraising Platform

by stellarwp · last CVE Oct 10, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 5High 2Medium 26Low 0

Severity

Exploitation

Watch

Add GiveWP – Donation Plugin and Fundraising Platform to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-2025	7.5	1%	Mar 15	Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function Affected: through 3.22.0
CVE-2024-9130	7.2	1%	Sep 27	GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter Affected: through 3.16.1