Login Request a demo
GI
Vendor
GiveWP
3 products with CVEs on record
67
CVEs
0
On KEV
0
New 30D
Products
GI
GiveWP
GiveWP
9.8
61 CVEs0 on KEV0 new
GD
GiveWP – Donation Plugin and Fundraising Platform
GiveWP
9.8
4 CVEs0 on KEV0 new
GW
GiveWP (WordPress plugin)
GiveWP
7.2
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-13206
GI
Givewp
Givewp
6.1
0%
Nov 19GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'
CVE-2025-11228
GI
Givewp
Givewp
5.3
0%
Oct 4GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association
CVE-2025-11227
GI
Givewp
Givewp
6.5
0%
Oct 4GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure
CVE-2025-7221
GI
Givewp
Givewp
4.3
0%
Aug 21GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update
CVE-2025-8620
GI
Givewp
Givewp
5.3
1%
Aug 6GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
CVE-2025-7205
GI
Givewp
Givewp
5.4
0%
Jul 31GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting
CVE-2025-4571
GI
Givewp
Givewp
5.4
0%
Jun 19GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification
CVE-2025-2331
GI
Givewp
Givewp
6.5
0%
Mar 22GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure
CVE-2025-2025
GI
Givewp
Givewp
7.5
1%
Mar 15Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function
CVE-2025-0912
GI
Givewp
Givewp
9.8
1%
Mar 4GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection
CVE-2025-22777
GI
Givewp
Givewp
9.8
1%
Jan 13WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability
CVE-2024-12877
GI
Givewp
Givewp
9.8
1%
Jan 11GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
CVE-2023-23672
GI
Givewp
Givewp
5.4
0%
Jan 2WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability
CVE-2023-47183
GI
Givewp
Givewp
9.8
0%
Jan 2WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability
CVE-2024-11921
GI
Givewp
Givewp
4.8
1%
Dec 27Give < 3.19.0 - Reflected XSS
CVE-2024-9634
GI
Givewp
Givewp
9.8
1%
Oct 16GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution
CVE-2024-8353
GI
Givewp
Givewp
9.8
32%
Sep 28GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection
CVE-2024-9130
GI
Givewp
Givewp
7.2
1%
Sep 27GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
CVE-2024-47315
GI
Givewp
Givewp
8.8
0%
Sep 25WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-6551
GI
Givewp
Givewp
5.3
0%
Aug 29GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
CVE-2024-5940
GI
Givewp
Givewp
5.3
0%
Aug 20GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update
CVE-2024-5939
GI
Givewp
Givewp
5.3
0%
Aug 20GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure
CVE-2024-5932
GI
Givewp
Givewp
9.8
77%
Aug 20GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution
CVE-2024-5941
GI
Givewp
Givewp
5.4
0%
Aug 20GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
CVE-2024-37099
GI
Givewp
Givewp
9.8
1%
Aug 19WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability
CVE-2024-5977
GI
Givewp
Givewp
5.4
0%
Jul 19GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions
CVE-2024-35679
GI
Givewp
Givewp
6.1
0%
Jun 8WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-3714
GI
Givewp
Givewp
5.4
0%
May 18GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-41665
GI
GiveWP
GiveWP
8.8
1%
May 17WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
CVE-2024-1957
GI
Givewp
Givewp
5.4
0%
Apr 13GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2022-40211
GI
GiveWP
GiveWP
4.8
0%
Apr 12WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability
CVE-2024-1424
GI
Givewp
Givewp
5.4
0%
Apr 9GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-30229
GI
Givewp
Givewp
7.2
1%
Mar 28WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
CVE-2024-27987
GI
Givewp
Givewp
6.1
0%
Mar 15WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-51415
GD
GiveWP – Donation Plugin and Fundraising Platform
GiveWP
5.4
0%
Feb 10WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-0224
GI
Givewp
Givewp
9.8
4%
Jan 16GiveWP < 2.24.1 - Unauthenticated SQLi
CVE-2023-4247
GI
Givewp
Givewp
5.4
0%
Jan 11GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
CVE-2023-4246
GI
Givewp
Givewp
4.3
0%
Jan 11GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
CVE-2023-4248
GI
Givewp
Givewp
4.3
0%
Jan 11GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
CVE-2023-32513
GD
GiveWP – Donation Plugin and Fundraising Platform
GiveWP
9.8
1%
Dec 28WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection
CVE-2022-40312
GD
GiveWP – Donation Plugin and Fundraising Platform
GiveWP
6.5
0%
Dec 18WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-22719
GI
GiveWP
GiveWP
9.8
1%
Nov 7WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection
CVE-2023-25450
GD
GiveWP – Donation Plugin and Fundraising Platform
GiveWP
8.8
0%
Jun 15WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-23668
GI
GiveWP
GiveWP
5.4
0%
May 8WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-4448
GI
Givewp
Givewp
5.4
1%
Feb 13GiveWP < 2.24.0 - Contributor+ Stored XSS
CVE-2022-2260
GI
Givewp
Givewp
6.5
0%
Aug 1GiveWP < 2.21.3 - DoS via CSRF
CVE-2022-2215
GI
Givewp
Givewp
4.8
1%
Aug 1GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting
CVE-2022-31475
GW
GiveWP (WordPress plugin)
GiveWP
4.9
1%
Jul 21WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability
CVE-2022-28700
GW
GiveWP (WordPress plugin)
GiveWP
7.2
2%
Jul 21WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability
CVE-2022-2117
GI
Givewp
Givewp
5.3
1%
Jul 18GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
CVE-2022-0252
GI
Givewp
Givewp
6.1
1%
Feb 21Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
CVE-2021-25100
GI
Givewp
Givewp
6.1
1%
Feb 21Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard
CVE-2021-25099
GI
Givewp
Givewp
6.1
2%
Feb 21Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting
CVE-2021-24524
GI
Givewp
Givewp
4.8
1%
Aug 23GiveWP < 2.12.0 - Authenticated Stored XSS
CVE-2021-24315
GI
Givewp
Givewp
4.8
1%
May 17The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo…
CVE-2021-24213
GI
Givewp
Givewp
6.1
1%
Apr 12The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration…
CVE-2020-20627
GI
Givewp
Givewp
5.3
2%
Aug 31The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change
CVE-2019-20360
GI
Givewp
Givewp
7.5
2%
Jan 8A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information (PII)…
CVE-2019-15317
GI
Givewp
Givewp
5.4
1%
Aug 22The give plugin before 2.4.7 for WordPress has XSS via a donor name
CVE-2019-13578
GI
Givewp
Givewp
9.8
3%
Aug 15A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress