| CVE-2026-111974 |
The GiveWP WordPress plugin before 4.19.0.1 does not restrict the currency of a donation to the one the site or form…
|
5.3
Moyenne
|
26 oct. 2026 |
| CVE-2026-111981 |
The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes,…
|
2.7
Faible
|
25 oct. 2026 |
| CVE-2026-111976 |
The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation…
|
5.3
Moyenne
|
25 oct. 2026 |
| CVE-2026-111978 |
The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it…
|
6.0
Moyenne
|
25 oct. 2026 |
| CVE-2026-111979 |
The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template…
|
6.8
Moyenne
|
25 oct. 2026 |
| CVE-2026-111980 |
The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies…
|
5.5
Moyenne
|
25 oct. 2026 |
| CVE-2026-85113 |
The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied values before…
|
6.5
Moyenne
|
21 sept. 2026 |
| CVE-2026-85530 |
The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the…
|
8.1
Élevée
|
16 sept. 2026 |
| CVE-2026-14317 |
The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by…
|
5.3
Moyenne
|
31 juil. 2026 |
| CVE-2026-14319 |
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns…
|
7.5
Élevée
|
31 juil. 2026 |
| CVE-2026-14318 |
The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an…
|
6.8
Moyenne
|
30 juil. 2026 |
| CVE-2024-11921 |
The GiveWP WordPress plugin before 3.19.0 does not sanitise and escape a parameter before outputting it back in the…
|
4.8
Moyenne
|
27 déc. 2024 |
| CVE-2023-0224 |
The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could…
|
9.8
Critique
|
16 janv. 2024 |
| CVE-2022-4448 |
The GiveWP WordPress plugin before 2.24.0 does not validate and escape some of its shortcode attributes before…
|
5.4
Moyenne
|
13 févr. 2023 |