Givewp Donation Plugin And Fundraising Platform (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-08-01. Vendor: Unknown.

CVEs of Givewp Donation Plugin And Fundraising Platform

• CVE-2022-2215 - CVSS 4.8 (medium), 2022-08-01: The GiveWP WordPress plugin before 2.21.3 does not properly sanitise and escape the currency settings, which could allow high privilege users such as admin to…
• CVE-2022-2260 - CVSS 6.5 (medium), 2022-08-01: The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exporting parameters such as dates, which…
• CVE-2022-0252 - CVSS 6.1 (medium), 2022-02-21: The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading…
• CVE-2021-25099 - CVSS 6.1 (medium), 2022-02-21: The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated…
• CVE-2021-25100 - CVSS 6.1 (medium), 2022-02-21: The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading…
• CVE-2021-24524 - CVSS 4.8 (medium), 2021-08-23: The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing…