Skip to content
Noroxi

GiveWP records

61 published records for vendor givewp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 3.3%
Pre-auth RCE
6
With a fix record
31.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

61 records
  • CVE-2024-5932
    62This week

    GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

    CriticalCVSS 9.8WeaponizedEPSS 77%

    givewp · givewpAug 19, 2024

  • CVE-2024-8353
    48Plan

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8WeaponizedEPSS 29%

    givewp · givewpSep 27, 2024

  • CVE-2023-0224
    40Plan

    GiveWP < 2.24.1 - Unauthenticated SQLi

    CriticalCVSS 9.8No exploitEPSS 4%

    givewp · givewpJan 16, 2024

  • CVE-2019-13578
    40Plan

    A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 3%

    givewp · givewpAug 15, 2019

  • CVE-2025-0912
    39Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    givewp · givewpMar 4, 2025

  • CVE-2024-9634
    39Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 1%

    givewp · givewpOct 15, 2024

  • CVE-2024-12877
    39Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    givewp · givewpJan 11, 2025

  • CVE-2025-22777
    39Monitor

    WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    givewp · givewpJan 13, 2025

  • CVE-2023-22719
    39Monitor

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    givewp · givewpNov 7, 2023

  • CVE-2023-32513
    39Monitor

    WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    givewp · givewpDec 28, 2023

  • CVE-2024-37099
    39Monitor

    WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    givewp · givewpAug 19, 2024

  • CVE-2023-47183
    39Monitor

    WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    givewp · givewpJan 2, 2025

  • CVE-2023-41665
    35Monitor

    WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    givewp · givewpMay 17, 2024

  • CVE-2023-25450
    35Monitor

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    givewp · givewpJun 15, 2023

  • CVE-2024-47315
    35Monitor

    WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    givewp · givewpSep 25, 2024

  • CVE-2019-20360
    31Monitor

    A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally id

    HighCVSS 7.5No exploitEPSS 2%

    givewp · givewpJan 8, 2020

  • CVE-2025-2025
    30Monitor

    Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

    HighCVSS 7.5No exploitEPSS 1%

    givewp · givewpMar 15, 2025

  • CVE-2022-28700
    29Monitor

    WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

    HighCVSS 7.2No exploitEPSS 2%

    givewp · givewpJul 21, 2022

  • CVE-2024-9130
    28Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter

    HighCVSS 7.2No exploitEPSS 1%

    givewp · givewpSep 27, 2024

  • CVE-2024-30229
    28Monitor

    WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    givewp · givewpMar 28, 2024

  • CVE-2022-2260
    26Monitor

    GiveWP < 2.21.3 - DoS via CSRF

    MediumCVSS 6.5No exploitEPSS 0%

    givewp · givewpAug 1, 2022

  • CVE-2022-40312
    26Monitor

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)

    MediumCVSS 6.5No exploitEPSS 0%

    givewp · givewpDec 18, 2023

  • CVE-2025-2331
    26Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    MediumCVSS 6.5No exploitEPSS 0%

    givewp · givewpMar 22, 2025

  • CVE-2025-11227
    26Monitor

    GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    givewp · givewpOct 4, 2025

  • CVE-2021-25099
    25Monitor

    Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    givewp · givewpFeb 21, 2022