WordPress give has 30 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-5932 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and | critical | 10.0 | <3.14.2 | 3.14.2 |
| CVE-2024-8353 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and | critical | 9.8 | <3.16.2 | 3.16.2 |
| CVE-2022-28700 | Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. | critical | 9.1 | <2.21.0 | 2.21.0 |
| CVE-2025-0912 | The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.4 via deserializa | critical | 9.8 | <3.20.0 | 3.20.0 |
| CVE-2024-9634 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and | critical | 9.8 | <3.16.4 | 3.16.4 |
| CVE-2024-12877 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and | critical | 9.8 | <=3.19.2 | – |
| CVE-2019-15317 | The give plugin before 2.4.7 for WordPress has XSS via a donor name. | medium | 5.4 | <2.4.7 | 2.4.7 |
| CVE-2022-2117 | The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wa | medium | 5.3 | <=2.20.2 | – |
| CVE-2022-31475 | Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. | medium | 5.5 | <2.21.0 | 2.21.0 |
| CVE-2024-9130 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ paramet | high | 7.2 | <3.16.2 | 3.16.2 |
| CVE-2025-2025 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing cap | medium | 6.5 | <3.22.1 | 3.22.1 |
| CVE-2025-8620 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and | medium | 5.3 | <4.6.1 | 4.6.1 |
| CVE-2024-5939 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing cap | medium | 5.3 | <3.14.0 | 3.14.0 |
| CVE-2024-5940 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missi | medium | 6.5 | <3.14.0 | 3.14.0 |
| CVE-2024-5977 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions | medium | 5.4 | <3.14.0 | 3.14.0 |
| CVE-2024-1424 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sho | medium | 6.4 | <3.6.0 | 3.6.0 |
| CVE-2025-13206 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ param | high | 7.2 | <4.13.1 | 4.13.1 |
| CVE-2024-5941 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to | medium | 5.4 | <3.14.2 | 3.14.2 |
| CVE-2025-2331 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u | medium | 5.3 | <3.22.2 | 3.22.2 |
| CVE-2024-1957 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gi | medium | 6.4 | <3.7.0 | 3.7.0 |
| CVE-2024-6551 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and | medium | 5.3 | <3.16.0 | 3.16.0 |
| CVE-2025-4571 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due t | medium | 5.4 | <4.3.1 | 4.3.1 |
| CVE-2025-11228 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missi | medium | 5.3 | <4.10.1 | 4.10.1 |
| CVE-2024-3714 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gi | medium | 6.4 | <3.11.0 | 3.11.0 |
| CVE-2025-11227 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and | medium | 6.5 | <4.10.1 | 4.10.1 |
| CVE-2023-4247 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. This is due to missing | medium | 5.4 | <=2.33.3 | – |
| CVE-2025-7221 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missi | medium | 4.3 | <4.6.1 | 4.6.1 |
| CVE-2023-4248 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. This is due to missing | medium | 5.4 | <=2.33.3 | – |
| CVE-2023-4246 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. This is due to missing | medium | 4.3 | <=2.33.3 | – |
| CVE-2025-7205 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes | medium | 5.4 | <4.6.0 | 4.6.0 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked