Givewp
This hub aggregates every CVE we track for Givewp, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
69
CVEs tracked
10
Critical
12
High
0
In CISA KEV
Severity distribution
MEDIUM47HIGH12CRITICAL10
Monthly trend
3
1
0
1
4
0
3
0
0
1
1
2
0
2
1
2
0
0
0
1
0
2
2
1
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Givewp.
- CVE-2026-66690WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-65441WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-65464WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2026-34900WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-42678WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-42642WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability5.3
- CVE-2025-66533WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability5.3
- CVE-2025-67467WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2025-13206GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'7.2
- CVE-2025-11228GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association5.3
- CVE-2025-11227GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure6.5
- CVE-2025-7221GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update4.3
- CVE-2025-8620GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure5.3
- CVE-2025-7205GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting5.4
- CVE-2025-4571GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification5.4
Product normalization is registry-driven with AI assist and human review. How it works