WordPress Vulnerability Scanner WPSec
Vulnerabilities / GiveWP – Donation Plugin and Fundraising Platform

GiveWP – Donation Plugin and Fundraising Platform vulnerabilities

Advisories WPSec published for GiveWP – Donation Plugin and Fundraising Platform. Other sources may list more. Its attack surface: GiveWP – Donation Plugin and Fundraising Platform on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-07 WPSEC-2026-0598 GiveWP – Donation Plugin and Fundraising Platform <= 4.18.0 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Standard IPN Notifications Low 3.7 4.18.0.1
2026-10-02 WPSEC-2026-0361 GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Reflected Cross-Site Scripting via Stripe Webhook Event Type Medium 6.1 4.18.0
2026-10-02 WPSEC-2026-0360 GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Sensitive Information Exposure via Email Meta Tag Injection Medium 5.3 4.18.0
2026-10-02 WPSEC-2026-0359 GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Grid Shortcode and Campaign Block Attributes Medium 6.4 4.18.0

License: CC BY 4.0