GiveWP

PII Sensitive Data Exposure vulnerability < 4.6.1

7.5

1 August, 2025

Authenticated (GiveWP worker+) Stored CrossSite Scripting vulnerability <= 4.5.0

6.5

30 July, 2025

Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification vulnerability <= 4.3.0

5.4

19 June, 2025

Authenticated (Subscriber+) Sensitive Information Exposure vulnerability <= 3.22.1

4.3

24 March, 2025

Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function vulnerability <= 3.22.0

6.5

18 March, 2025