Vulnérabilités connues pour StellarWP GiveWP – Donation Plugin and Fundraising Platform
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-118193 | GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter | 8.8 Élevée | 5 nov. 2026 |
| CVE-2026-97643 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Moyenne | 10 oct. 2026 |
| CVE-2026-5510 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Moyenne | 28 août 2026 |
| CVE-2026-14987 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Moyenne | 16 juil. 2026 |
| CVE-2026-13704 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Moyenne | 2 juil. 2026 |
| CVE-2026-11981 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3… | 4.3 Moyenne | 1 juil. 2026 |
| CVE-2026-13246 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Moyenne | 1 juil. 2026 |
| CVE-2025-13206 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 7.2 Élevée | 19 nov. 2025 |
| CVE-2025-11228 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 5.3 Moyenne | 4 oct. 2025 |
| CVE-2025-11227 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in… | 6.5 Moyenne | 4 oct. 2025 |
| CVE-2025-7221 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 4.3 Moyenne | 21 août 2025 |
| CVE-2025-8620 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in… | 5.3 Moyenne | 6 août 2025 |
| CVE-2025-7205 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 5.4 Moyenne | 31 juil. 2025 |
| CVE-2025-4571 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and… | 5.4 Moyenne | 19 juin 2025 |
| CVE-2025-2331 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information… | 5.3 Moyenne | 22 mars 2025 |
| CVE-2025-2025 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of… | 6.5 Moyenne | 15 mars 2025 |
| CVE-2025-0912 | The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,… | 9.8 Critique | 4 mars 2025 |
| CVE-2024-12877 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critique | 11 janv. 2025 |
| CVE-2024-9634 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critique | 16 oct. 2024 |
| CVE-2024-8353 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critique | 28 sept. 2024 |
| CVE-2024-9130 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via… | 7.2 Élevée | 27 sept. 2024 |
| CVE-2024-6551 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in… | 5.3 Moyenne | 29 août 2024 |
| CVE-2024-5940 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 6.5 Moyenne | 20 août 2024 |
| CVE-2024-5939 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of… | 5.3 Moyenne | 20 août 2024 |
| CVE-2024-5932 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 10.0 Critique | 20 août 2024 |
Autres produits StellarWP
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
Membership Plugin – Restrict Content 7
LearnDash LMS 7
WPComplete 4
Kadence WooCommerce Email Designer 4
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Bookit — Booking & Appointment Calendar 3
Restrict Content 2