CVE-2022-28700 Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress

Description

Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

Affected products and versions

Product	Affected versions	Fixed in
GiveWP (WordPress plugin) 2.20	earliest → 2.20.2	No fix stated

Other CVEs of GiveWP (WordPress plugin)

The 2 CVEs of GiveWP (WordPress plugin) →

CVE-2022-31475 Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP… 5.5 Medium