CVE-2025-11227: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetFor

medium Affects give (WordPress plugin). Feed 2026.10.29.4, updated 2026-10-29; published 2025-10-04; advisory modified 2026-10-11.

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetFor

Package: give (WordPress plugin) WordPress
Affected versions: <4.10.1
Fixed in: 4.10.1
Severity: medium CVSS 6.5
Exploitation: not on CISA KEV · EPSS 0% (20.2th percentile)
Published: 2025-10-04
Source: nvd

References

CWE-285

NVD record give (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# PHP projects (recommended)
composer require --dev phpwarden/phpwarden
# then
vendor/bin/phpwarden wordpress /var/www/html

# or, without Composer
pipx install phpwarden   &&   phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2024-5932 critical The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable t same package: give (WordPress plugin)
CVE-2024-8353 critical The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable t same package: give (WordPress plugin)
CVE-2022-28700 critical Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP same package: give (WordPress plugin)
CVE-2025-0912 critical The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all ver same package: give (WordPress plugin)
CVE-2024-9634 critical The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable t same package: give (WordPress plugin)
CVE-2024-12877 critical The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable t same package: give (WordPress plugin)