Advisories · Technology

StellarWP GiveWP.

Every CVE that names StellarWP GiveWP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42642 CVE record

CVSS 5.3 Medium

WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability
- StellarWP GiveWP
- Broken access control
Not analysed yet 29 Apr 2026
CVE-2025-67467 CVE record

CVSS 5.4 Medium

WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability
- StellarWP GiveWP
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025
CVE-2025-22777 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability
- StellarWP GiveWP
- Insecure deserialization
Not analysed yet 13 Jan 2025
CVE-2023-47183 CVE record

CVSS 5.3 Medium

WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability
- StellarWP GiveWP
- Broken access control
Not analysed yet 2 Jan 2025
CVE-2024-47315 CVE record

CVSS 5.4 Medium

WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability
- StellarWP GiveWP
- Cross-site request forgery (CSRF)
Not analysed yet 25 Sept 2024
CVE-2024-35679 CVE record

CVSS 7.1 High

WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
- StellarWP GiveWP
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2024
CVE-2024-30229 CVE record

CVSS 8.0 High

WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
- StellarWP GiveWP
- Insecure deserialization
Not analysed yet 28 Mar 2024
CVE-2024-27987 CVE record

CVSS 7.1 High

WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
- StellarWP GiveWP
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2024