Security
فارسی
All products

give

WordPress · Plugin
109 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' ParameterCVE-2026-118193 give WordPress High Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.19.0.1 - Missing AuthorizationCVE-2026-116853 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Missing AuthorizationCVE-2026-111981 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Missing AuthorizationCVE-2026-111980 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Authenticated (Give Worker+) Stored Cross-Site ScriptingCVE-2026-111979 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Authenticated (Give Manager+) Path TraversalCVE-2026-111978 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Unauthenticated Donation Amount Restriction BypassCVE-2026-111974 give WordPress Medium Fix reported
GiveWP <= 4.19.0.0 - Unauthenticated Information ExposureCVE-2026-111976 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.8.1 - Unauthenticated Payment BypassCVE-2026-96333 give WordPress Medium Fix reported
GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode AttributesCVE-2026-97643 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.18.0 - Missing AuthorizationCVE-2026-106600 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-104672 give WordPress High Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Privilege EscalationCVE-2026-104405 give WordPress High Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-104404 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated User ImpersonationCVE-2026-97196 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-97066 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information ExposureCVE-2026-96834 give WordPress Medium Fix reported
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-96830 give WordPress High Fix reported
GiveWP <= 4.16.8.0 - Unauthenticated Privilege EscalationCVE-2026-85530 give WordPress High Fix reported
GiveWP <= 4.16.8 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-85113 give WordPress Medium Fix reported