5.5
Medium
CVE-2022-31475 Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP…
Description
Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GiveWP (WordPress plugin) 2.20 | earliest → 2.20.2 | No fix stated |