Givewp Donation Plugin And Fundraising Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:webdevmattcrom:givewp_donation_plugin_and_fundraising_platform:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Webdevmattcrom (73aa66e4-6dc0-5eac-bd79-c67e4f6d933b) |
|---|---|
| Product | Givewp Donation Plugin And Fundraising Platform (8f544fba-1de3-5f91-b756-183e44cc81df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9634 |
vulnerable | 2026-06-08 07:00:28.356109 |
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution
CRITICAL (9.8)
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the give_company_name parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution.
Published: 2024-10-16T02:05:09.208Z
Updated: 2026-04-08T17:17:52.783Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5940 |
vulnerable | 2026-06-08 06:56:18.051720 |
GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update
MEDIUM (6.5)
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_request' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edit event ticket settings if the Events beta feature is enabled.
Published: 2024-08-20T02:03:19.791Z
Updated: 2026-04-08T17:25:42.022Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.