GiveWP

Reflected XSS vulnerability < 3.19.0

7.1

27 December, 2024

Unauthenticated PHP Object Injection to Remote Code Execution vulnerability <= 3.16.3

10.0

15 October, 2024

Unauthenticated PHP Object Injection to Remote Code Execution (RCE) vulnerability <= 3.16.2

10.0

30 September, 2024

Authenticated (GiveWP Manager+) SQL Injection via order Parameter vulnerability <= 3.16.1

7.6

27 September, 2024

Cross Site Request Forgery (CSRF) vulnerability <= 3.15.1

5.4

25 September, 2024