İçeriğe atla
Noroxi

GiveWP kayıtları

givewp üreticisine ait 61 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %3,3
Pre-auth RCE
6
Düzeltme kaydı olan
%31,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

61 kayıt
  • CVE-2024-5932
    62Bu hafta

    GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    givewp · givewp19 Ağu 2024

  • CVE-2024-8353
    48Planlayın

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %29

    givewp · givewp27 Eyl 2024

  • CVE-2023-0224
    40Planlayın

    GiveWP < 2.24.1 - Unauthenticated SQLi

    KritikCVSS 9,8İstismar yokEPSS %4

    givewp · givewp16 Oca 2024

  • CVE-2019-13578
    40Planlayın

    A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress.

    KritikCVSS 9,8İstismar yokEPSS %3

    givewp · givewp15 Ağu 2019

  • CVE-2025-0912
    39İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    givewp · givewp4 Mar 2025

  • CVE-2024-9634
    39İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %1

    givewp · givewp15 Eki 2024

  • CVE-2024-12877
    39İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    givewp · givewp11 Oca 2025

  • CVE-2025-22777
    39İzleyin

    WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    givewp · givewp13 Oca 2025

  • CVE-2023-22719
    39İzleyin

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    givewp · givewp7 Kas 2023

  • CVE-2023-32513
    39İzleyin

    WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    givewp · givewp28 Ara 2023

  • CVE-2024-37099
    39İzleyin

    WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    givewp · givewp19 Ağu 2024

  • CVE-2023-47183
    39İzleyin

    WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    givewp · givewp2 Oca 2025

  • CVE-2023-41665
    35İzleyin

    WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    givewp · givewp17 May 2024

  • CVE-2023-25450
    35İzleyin

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    givewp · givewp15 Haz 2023

  • CVE-2024-47315
    35İzleyin

    WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    givewp · givewp25 Eyl 2024

  • CVE-2019-20360
    31İzleyin

    A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally id

    YüksekCVSS 7,5İstismar yokEPSS %2

    givewp · givewp8 Oca 2020

  • CVE-2025-2025
    30İzleyin

    Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

    YüksekCVSS 7,5İstismar yokEPSS %1

    givewp · givewp15 Mar 2025

  • CVE-2022-28700
    29İzleyin

    WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %2

    givewp · givewp21 Tem 2022

  • CVE-2024-9130
    28İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter

    YüksekCVSS 7,2İstismar yokEPSS %1

    givewp · givewp27 Eyl 2024

  • CVE-2024-30229
    28İzleyin

    WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    givewp · givewp28 Mar 2024

  • CVE-2022-2260
    26İzleyin

    GiveWP < 2.21.3 - DoS via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    givewp · givewp1 Ağu 2022

  • CVE-2022-40312
    26İzleyin

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)

    OrtaCVSS 6,5İstismar yokEPSS %0

    givewp · givewp18 Ara 2023

  • CVE-2025-2331
    26İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    OrtaCVSS 6,5İstismar yokEPSS %0

    givewp · givewp22 Mar 2025

  • CVE-2025-11227
    26İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %0

    givewp · givewp3 Eki 2025

  • CVE-2021-25099
    25İzleyin

    Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    givewp · givewp21 Şub 2022