Update the WordPress GiveWP plugin to the latest available version (at least 2.21.0).
Rafie Muhammad (Patchstack) discovered and reported this Directory Traversal vulnerability in WordPress GiveWP Plugin. This could allow a malicious actor to see all files in a given directory or determine if certain files/directories exist in given folder. This can be used to exploit other weaknesses in the system This vulnerability has been fixed in version 2.21.0.
Cross Site Scripting (XSS) via render_dropdown vulnerability
5.9
10.03.2023
Server Side Request Forgery (SSRF) vulnerability
5.5
10.03.2023
CSV Injection vulnerability
4.7
10.03.2023
Arbitrary Content Deletion vulnerability
5.4
10.03.2023
Contributor+ Cross Site Scripting (XSS) vulnerability
6.5
10.03.2023
Cross Site Request Forgery (CSRF) via give_cache_flush vulnerability
5.4
10.03.2023
Successfully submit vulnerabilities and receive an invite to our Alliance platform.
Learn more
Close
GiveWP
LinkedIn
Facebook
Twitter
Join Discord
