Approved changes feed: RSS · Atom
cpe:2.3:a:givewp:givewp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Givewp (3094bdd5-a183-5f4d-9dcf-99d8707942e1) |
|---|---|
| Product | Givewp (848b2d66-72b8-5b1d-8174-de03fc9782b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/impress-org/givewp |
purl2cpe | 2026-06-01 10:11:52.147728 |
pkg:github/wp-plugins/give |
purl2cpe | 2026-06-01 10:11:52.147732 |
pkg:github/wpplugins/give |
purl2cpe | 2026-06-01 10:11:52.147735 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47315 |
vulnerable | 2026-06-08 06:48:11.756851 |
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.15.1.
Published: 2024-09-25T17:32:56.119Z
Updated: 2026-04-28T16:10:18.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35679 |
vulnerable | 2026-06-08 06:39:42.331556 |
WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.12.0.
Published: 2024-06-08T15:01:08.232Z
Updated: 2026-04-28T16:09:52.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41665 |
vulnerable | 2026-06-08 06:11:06.348790 |
WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
HIGH (8.8)
Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0.
Published: 2024-05-17T06:53:56.913Z
Updated: 2026-04-28T16:08:38.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23668 |
vulnerable | 2026-06-08 05:56:04.166075 |
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in GiveWP plugin <= 2.25.1 versions.
Published: 2023-05-08T11:56:34.589Z
Updated: 2026-04-28T16:08:00.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22719 |
vulnerable | 2026-06-08 05:54:26.966513 |
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection
MEDIUM (4.7)
Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a through 2.25.1.
Published: 2023-11-07T15:41:52.708Z
Updated: 2026-04-28T16:07:59.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40211 |
vulnerable | 2026-06-08 05:48:24.198264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.