cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2023-51415,https://securityvulnerability.io/vulnerability/CVE-2023-51415,Cross-site Scripting (XSS) Vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform,"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform allows Stored XSS.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 3.2.2.

",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.5,MEDIUM,0.00044999999227002263,false,false,false,false,,false,false,2024-02-10T08:39:12.408Z,0
CVE-2023-32513,https://securityvulnerability.io/vulnerability/CVE-2023-32513,WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection,"Deserialization of Untrusted Data vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 2.25.3.

",GiveWP,GiveWP – Donation Plugin and Fundraising Platform,7.5,HIGH,0.001129999989643693,false,false,false,false,,false,false,2023-12-28T11:15:00.000Z,0
CVE-2022-40312,https://securityvulnerability.io/vulnerability/CVE-2022-40312,WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF),"Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 2.25.1.

",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,5.5,MEDIUM,0.0006200000061653554,false,false,false,false,,false,false,2023-12-18T15:08:55.293Z,0
CVE-2023-25450,https://securityvulnerability.io/vulnerability/CVE-2023-25450,WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF),Cross-Site Request Forgery (CSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin <= 2.25.1 versions.,GiveWP,GiveWP – Donation Plugin And Fundraising Platform,5.4,MEDIUM,0.000859999970998615,false,false,false,false,,false,false,2023-06-15T13:15:00.000Z,0
CVE-2022-2260,https://securityvulnerability.io/vulnerability/CVE-2022-2260,GiveWP < 2.21.3 - DoS via CSRF,"The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exporting parameters such as dates, which could allow attackers to make a logged in admin DoS the web server via a CSRF attack as the plugin will try to retrieve data from the database many times which leads to overwhelm the target's CPU.",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.5,MEDIUM,0.0008399999933317304,false,false,false,false,,false,false,2022-08-01T12:50:58.000Z,0
CVE-2022-2215,https://securityvulnerability.io/vulnerability/CVE-2022-2215,GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting,"The GiveWP WordPress plugin before 2.21.3 does not properly sanitise and escape the currency settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,4.8,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2022-08-01T12:50:18.000Z,0
CVE-2022-0252,https://securityvulnerability.io/vulnerability/CVE-2022-0252,Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool,"The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.1,MEDIUM,0.0006900000153109431,false,false,false,false,,false,false,2022-02-21T10:46:09.000Z,0
CVE-2021-25100,https://securityvulnerability.io/vulnerability/CVE-2021-25100,Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard,"The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.1,MEDIUM,0.0006900000153109431,false,false,false,false,,false,false,2022-02-21T10:45:54.000Z,0
CVE-2021-25099,https://securityvulnerability.io/vulnerability/CVE-2021-25099,Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting,"The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.1,MEDIUM,0.0010000000474974513,false,false,false,false,,false,false,2022-02-21T10:45:53.000Z,0
CVE-2021-24524,https://securityvulnerability.io/vulnerability/CVE-2021-24524,GiveWP < 2.12.0 - Authenticated Stored XSS,"The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,4.8,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2021-08-23T11:09:59.000Z,0
CVE-2021-24315,https://securityvulnerability.io/vulnerability/CVE-2021-24315,Give WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS),"The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated (admin+) Stored XSS issues.",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,4.8,MEDIUM,0.000590000010561198,false,false,false,false,,false,false,2021-05-17T16:48:53.000Z,0
CVE-2021-24213,https://securityvulnerability.io/vulnerability/CVE-2021-24213,GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS),"The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page.",GiveWP,GiveWP – Donation Plugin And Fundraising Platform,6.1,MEDIUM,0.0014900000533089042,false,false,false,false,,false,false,2021-04-12T14:00:09.000Z,0