GiveWP

PHP Object Injection vulnerability <= 3.19.3

9.8

10 January, 2025

Reflected XSS vulnerability < 3.19.0

7.1

27 December, 2024

Unauthenticated PHP Object Injection to Remote Code Execution vulnerability <= 3.16.3

10.0

15 October, 2024

Unauthenticated PHP Object Injection to Remote Code Execution (RCE) vulnerability <= 3.16.2

10.0

30 September, 2024

Authenticated (GiveWP Manager+) SQL Injection via order Parameter vulnerability <= 3.16.1

7.6

27 September, 2024