Known vulnerabilities in StellarWP GiveWP – Donation Plugin and Fundraising Platform
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-118193 | GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter | 8.8 High | Nov 5, 2026 |
| CVE-2026-97643 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Oct 10, 2026 |
| CVE-2026-5510 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Aug 28, 2026 |
| CVE-2026-14987 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Jul 16, 2026 |
| CVE-2026-13704 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Jul 2, 2026 |
| CVE-2026-11981 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3… | 4.3 Medium | Jul 1, 2026 |
| CVE-2026-13246 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Jul 1, 2026 |
| CVE-2025-13206 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 7.2 High | Nov 19, 2025 |
| CVE-2025-11228 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 5.3 Medium | Oct 4, 2025 |
| CVE-2025-11227 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in… | 6.5 Medium | Oct 4, 2025 |
| CVE-2025-7221 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 4.3 Medium | Aug 21, 2025 |
| CVE-2025-8620 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in… | 5.3 Medium | Aug 6, 2025 |
| CVE-2025-7205 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site… | 5.4 Medium | Jul 31, 2025 |
| CVE-2025-4571 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and… | 5.4 Medium | Jun 19, 2025 |
| CVE-2025-2331 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information… | 5.3 Medium | Mar 22, 2025 |
| CVE-2025-2025 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of… | 6.5 Medium | Mar 15, 2025 |
| CVE-2025-0912 | The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,… | 9.8 Critical | Mar 4, 2025 |
| CVE-2024-12877 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critical | Jan 11, 2025 |
| CVE-2024-9634 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critical | Oct 16, 2024 |
| CVE-2024-8353 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 9.8 Critical | Sep 28, 2024 |
| CVE-2024-9130 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via… | 7.2 High | Sep 27, 2024 |
| CVE-2024-6551 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in… | 5.3 Medium | Aug 29, 2024 |
| CVE-2024-5940 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of… | 6.5 Medium | Aug 20, 2024 |
| CVE-2024-5939 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of… | 5.3 Medium | Aug 20, 2024 |
| CVE-2024-5932 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in… | 10.0 Critical | Aug 20, 2024 |
Other StellarWP products
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
Membership Plugin – Restrict Content 7
LearnDash LMS 7
WPComplete 4
Kadence WooCommerce Email Designer 4
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Bookit — Booking & Appointment Calendar 3
Restrict Content 2