agentprime: stellarwp-givewp-donation-plugin-and-fundraising-platformEvery new CVE for stellarwp-givewp-donation-plugin-and-fundraising-platform.https://agentprime.io/CVE-2026-118193: GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameterhttps://agentprime.io/advisories/CVE-2026-118193/https://agentprime.io/advisories/CVE-2026-118193/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 04:48:07 GMTCVECVE-2026-97643: GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-97643/https://agentprime.io/advisories/CVE-2026-97643/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:04 GMTCVECVE-2026-5510: GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-5510/https://agentprime.io/advisories/CVE-2026-5510/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 07:40:17 GMTCVECVE-2026-14987: GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Settinghttps://agentprime.io/advisories/CVE-2026-14987/https://agentprime.io/advisories/CVE-2026-14987/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 02:30:56 GMTCVECVE-2026-13704: GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Formhttps://agentprime.io/advisories/CVE-2026-13704/https://agentprime.io/advisories/CVE-2026-13704/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 05:35:14 GMTCVECVE-2026-11981: GiveWP <= 4.15.3 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2026-11981/https://agentprime.io/advisories/CVE-2026-11981/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 04:32:26 GMTCVECVE-2026-13246: GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-13246/https://agentprime.io/advisories/CVE-2026-13246/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 03:43:33 GMTCVECVE-2025-13206: GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'https://agentprime.io/advisories/CVE-2025-13206/https://agentprime.io/advisories/CVE-2025-13206/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 07:46:08 GMTCVECVE-2025-11228: GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Associationhttps://agentprime.io/advisories/CVE-2025-11228/https://agentprime.io/advisories/CVE-2025-11228/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Oct 2025 02:24:37 GMTCVECVE-2025-11227: GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosurehttps://agentprime.io/advisories/CVE-2025-11227/https://agentprime.io/advisories/CVE-2025-11227/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Oct 2025 02:24:35 GMTCVECVE-2025-7221: GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Updatehttps://agentprime.io/advisories/CVE-2025-7221/https://agentprime.io/advisories/CVE-2025-7221/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Aug 2025 05:28:14 GMTCVECVE-2025-8620: GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposurehttps://agentprime.io/advisories/CVE-2025-8620/https://agentprime.io/advisories/CVE-2025-8620/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Aug 2025 09:22:32 GMTCVECVE-2025-7205: GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-7205/https://agentprime.io/advisories/CVE-2025-7205/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Jul 2025 07:25:00 GMTCVECVE-2025-4571: GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modificationhttps://agentprime.io/advisories/CVE-2025-4571/https://agentprime.io/advisories/CVE-2025-4571/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 06:44:48 GMTCVECVE-2025-2331: GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-2331/https://agentprime.io/advisories/CVE-2025-2331/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 11:18:41 GMTCVECVE-2025-2025: Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Functionhttps://agentprime.io/advisories/CVE-2025-2025/https://agentprime.io/advisories/CVE-2025-2025/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Mar 2025 11:13:27 GMTCVECVE-2025-0912: GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injectionhttps://agentprime.io/advisories/CVE-2025-0912/https://agentprime.io/advisories/CVE-2025-0912/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 03:37:59 GMTCVEcriticalCVE-2024-12877: GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injectionhttps://agentprime.io/advisories/CVE-2024-12877/https://agentprime.io/advisories/CVE-2024-12877/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jan 2025 07:21:53 GMTCVEcriticalCVE-2024-9634: GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Executionhttps://agentprime.io/advisories/CVE-2024-9634/https://agentprime.io/advisories/CVE-2024-9634/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 02:05:09 GMTCVEcriticalCVE-2024-8353: GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injectionhttps://agentprime.io/advisories/CVE-2024-8353/https://agentprime.io/advisories/CVE-2024-8353/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Sat, 28 Sep 2024 02:04:28 GMTCVEcriticalCVE-2024-9130: GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameterhttps://agentprime.io/advisories/CVE-2024-9130/https://agentprime.io/advisories/CVE-2024-9130/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Sep 2024 05:31:02 GMTCVECVE-2024-6551: GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosurehttps://agentprime.io/advisories/CVE-2024-6551/https://agentprime.io/advisories/CVE-2024-6551/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 10:59:40 GMTCVECVE-2024-5940: GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Updatehttps://agentprime.io/advisories/CVE-2024-5940/https://agentprime.io/advisories/CVE-2024-5940/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Aug 2024 02:03:19 GMTCVECVE-2024-5939: GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposurehttps://agentprime.io/advisories/CVE-2024-5939/https://agentprime.io/advisories/CVE-2024-5939/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Aug 2024 02:03:17 GMTCVECVE-2024-5932: GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Executionhttps://agentprime.io/advisories/CVE-2024-5932/https://agentprime.io/advisories/CVE-2024-5932/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.77 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Aug 2024 02:03:16 GMTCVEcriticalCVE-2024-5941: GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletionhttps://agentprime.io/advisories/CVE-2024-5941/https://agentprime.io/advisories/CVE-2024-5941/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Aug 2024 02:03:14 GMTCVECVE-2024-5977: GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actionshttps://agentprime.io/advisories/CVE-2024-5977/https://agentprime.io/advisories/CVE-2024-5977/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jul 2024 11:01:41 GMTCVECVE-2024-3714: GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-3714/https://agentprime.io/advisories/CVE-2024-3714/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 May 2024 04:30:52 GMTCVECVE-2024-1957: GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-1957/https://agentprime.io/advisories/CVE-2024-1957/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Apr 2024 01:57:48 GMTCVECVE-2024-1424: GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1424/https://agentprime.io/advisories/CVE-2024-1424/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:19 GMTCVECVE-2023-4247: GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivationhttps://agentprime.io/advisories/CVE-2023-4247/https://agentprime.io/advisories/CVE-2023-4247/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:33:05 GMTCVECVE-2023-4246: GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installationhttps://agentprime.io/advisories/CVE-2023-4246/https://agentprime.io/advisories/CVE-2023-4246/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:33:03 GMTCVECVE-2023-4248: GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletionhttps://agentprime.io/advisories/CVE-2023-4248/https://agentprime.io/advisories/CVE-2023-4248/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:32:30 GMTCVECVE-2022-2117: GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosurehttps://agentprime.io/advisories/CVE-2022-2117/https://agentprime.io/advisories/CVE-2022-2117/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Jul 2022 16:16:48 GMTCVE