GiveWP

Missing Authorization to Unauthenticated Forms and Campaigns Disclosure vulnerability <= 4.10.0

6.5

3 October, 2025

Missing Authorization to Unauthenticated FormsCampaign Association vulnerability <= 4.10.0

5.3

3 October, 2025

Missing Authorization to Donation Update vulnerability <= 4.5.0

4.3

20 August, 2025

PII Sensitive Data Exposure vulnerability < 4.6.1

7.5

1 August, 2025

Authenticated (GiveWP worker+) Stored CrossSite Scripting vulnerability <= 4.5.0

6.5

30 July, 2025