Advisories · Technology
Liquid Web / StellarWP GiveWP.
Every CVE that names Liquid Web / StellarWP GiveWP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
- Liquid Web / StellarWP GiveWP
- Authentication bypass
- CVSS 5.3 Medium
WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
- Liquid Web / StellarWP GiveWP
- Broken access control
- CVSS 6.5 Medium
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- Liquid Web / StellarWP GiveWP
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
- Liquid Web / StellarWP GiveWP
- CWE-1289
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
- Liquid Web / StellarWP GiveWP
- Insecure deserialization
- CVSS 7.1 High
WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability
- Liquid Web / StellarWP GiveWP
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability
- Liquid Web / StellarWP GiveWP
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability
- Liquid Web / StellarWP GiveWP
- Code injection
- CVSS 5.4 Medium
WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability
- Liquid Web / StellarWP GiveWP
- Broken access control