Known vulnerabilities in GiveWP – Donation Plugin and Fundraising Platform
Accept donations and begin fundraising with GiveWP, the highest rated WordPress donation plugin for online giving.
71Reported vulnerabilities
9.8Highest CVSS score
4.16.6.1Latest version
100,000+Active installs
What to do now
Update GiveWP – Donation Plugin and Fundraising Platform to 4.14.5 or later.
71 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-5932 | Critical | 74.3% | Before 3.14.2 | 3.14.2 |
August 20, 2024 |
| CVE-2024-8353 | Critical | 28.7% | Before 3.16.2 | 3.16.2 |
September 28, 2024 |
| CVE-2025-0912 | Critical | 1.4% | Before 3.20.0 | 3.20.0 |
March 4, 2025 |
| CVE-2024-12877 | Critical | 1.3% | 3.19.2 and earlier | 3.19.3 |
January 11, 2025 |
| CVE-2024-9634 | Critical | 1.4% | Before 3.16.4 | 3.16.4 |
October 16, 2024 |
| CVE-2025-22777 | Critical | 0.9% | 3.19.3 and earlier | 3.19.4 |
January 10, 2025 |
| CVE-2026-82222 | Critical | 0.4% | 4.16.7.1 and earlier | 4.16.7.2 |
August 28, 2026 |
| CVE-2019-15317 | Medium | 1.2% | Before 2.4.7 | 2.4.7 |
August 22, 2019 |
| CVE-2024-30229 | High | 0.6% | 3.4.2 and earlier | 3.5.0 |
April 26, 2024 |
| CVE-2023-22719 | High | 0.6% | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| CVE-2024-37099 | High | 0.6% | 3.14.1 and earlier | 3.14.2 |
August 9, 2024 |
| CVE-2022-28700 | High | 2.0% | Before 2.21.0 | 2.21.0 |
July 21, 2022 |
| CVE-2025-2025 | High | 0.6% | Before 3.22.1 | 3.22.1 |
March 15, 2025 |
| CVE-2024-9130 | High | 0.7% | Before 3.16.2 | 3.16.2 |
September 27, 2024 |
| CVE-2023-41665 | High | 0.6% | Before 2.33.1 | 2.33.1 |
August 31, 2023 |
| CVE-2026-66690 | High | 0.2% | 4.16.5 and earlier | 4.16.5.1 |
July 31, 2026 |
| CVE-2026-65441 | High | 0.1% | 4.16.3 and earlier | 4.16.4 |
July 27, 2026 |
| CVE-2026-42678 | High | 0.2% | 4.14.5 and earlier | 4.14.6 |
May 16, 2026 |
| CVE-2023-32513 | Medium | 0.6% | 2.25.3 and earlier | 2.26.0 |
May 10, 2023 |
| CVE-2026-5510 | Medium | 0.3% | 0 to 4.14.4 (inclusive) | 4.14.5 |
August 28, 2026 |
| CVE-2026-14318 | Medium | 0.3% | Before 4.16.3 | 4.16.3 |
July 30, 2026 |
| CVE-2026-14987 | Medium | 0.4% | 0 to 4.16.3 (inclusive) | 4.16.4 |
July 16, 2026 |
| CVE-2026-13704 | Medium | 0.4% | 0 to 4.16.1 (inclusive) | 4.16.2 |
July 2, 2026 |
| CVE-2026-13246 | Medium | 0.4% | 0 to 4.16.0 (inclusive) | 4.16.1 |
July 1, 2026 |
| CVE-2025-66533 | Medium | 0.3% | 4.13.1 and earlier | 4.13.2 |
January 8, 2026 |
| CVE-2025-11227 | Medium | 0.3% | Before 4.10.1 | 4.10.1 |
October 4, 2025 |
| CVE-2025-2331 | Medium | 0.4% | Before 3.22.2 | 3.22.2 |
March 22, 2025 |
| CVE-2023-51415 | Medium | 0.3% | 3.2.2 and earlier | 3.3.0 |
January 19, 2024 |
| CVE-2022-40211 | Medium | 0.4% | 2.25.1 and earlier | 2.25.2 |
March 10, 2023 |
| CVE-2023-23668 | Medium | 0.4% | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| CVE-2026-73357 | Medium | 0.2% | Before 4.16.6 | 4.16.6 |
August 12, 2026 |
| CVE-2026-34900 | Medium | 0.2% | 4.14.2 and earlier | 4.14.3 |
April 21, 2026 |
| CVE-2025-13206 | Medium | 0.3% | Before 4.13.1 | 4.13.1 |
November 19, 2025 |
| CVE-2024-35679 | Medium | 0.3% | 3.12.0 and earlier | 3.12.1 |
June 6, 2024 |
| CVE-2024-27987 | Medium | 0.4% | 3.3.1 and earlier | 3.4.0 |
March 15, 2024 |
| WF-2a0381b1-9b63-41cb-8125-d22274b98867 | Medium | — | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| WF-40f79195-23e7-4091-9dcb-8b787f0606f4 | Medium | — | Before 0.8.5 | 0.8.5 |
April 20, 2015 |
| CVE-2022-2117 | Medium | 1.1% | 2.20.2 and earlier | 2.21.0 |
July 18, 2022 |
| CVE-2025-4571 | Medium | 0.3% | Before 4.3.1 | 4.3.1 |
June 19, 2025 |
| CVE-2024-5941 | Medium | 0.4% | Before 3.14.2 | 3.14.2 |
August 20, 2024 |
| CVE-2024-5977 | Medium | 0.4% | Before 3.14.0 | 3.14.0 |
July 19, 2024 |
| CVE-2024-3714 | Medium | 0.3% | Before 3.11.0 | 3.11.0 |
May 18, 2024 |
| CVE-2024-1957 | Medium | 0.4% | Before 3.7.0 | 3.7.0 |
April 13, 2024 |
| CVE-2023-4247 | Medium | 0.3% | 2.33.3 and earlier | 2.33.4 |
January 11, 2024 |
| CVE-2023-23672 | Medium | 0.4% | 2.25.1 and earlier | 2.25.2 |
March 10, 2023 |
| CVE-2026-73348 | Medium | 0.2% | Before 4.16.6 | 4.16.6 |
August 14, 2026 |
| CVE-2026-73352 | Medium | 0.2% | 4.16.5.1 and earlier | 4.16.6 |
August 14, 2026 |
| CVE-2026-73349 | Medium | 0.2% | Before 4.16.6 | 4.16.6 |
August 12, 2026 |
| CVE-2026-14317 | Medium | 0.2% | Before 4.16.3 | 4.16.3 |
August 4, 2026 |
| CVE-2026-14319 | Medium | 0.3% | 4.16.2 and earlier | 4.16.3 |
July 13, 2026 |
| CVE-2026-42642 | Medium | 0.2% | 4.14.5 and earlier | 4.14.6 |
March 2, 2026 |
| CVE-2025-11228 | Medium | 0.3% | Before 4.10.1 | 4.10.1 |
October 4, 2025 |
| CVE-2025-7205 | Medium | 0.2% | Before 4.6.0 | 4.6.0 |
July 31, 2025 |
| CVE-2024-6551 | Medium | 0.3% | Before 3.16.0 | 3.16.0 |
August 29, 2024 |
| CVE-2024-5940 | Medium | 0.5% | Before 3.14.0 | 3.14.0 |
August 20, 2024 |
| CVE-2024-5939 | Medium | 0.5% | Before 3.14.0 | 3.14.0 |
August 20, 2024 |
| WF-a2dc1a04-5503-412b-92e7-ed86910abd92 | Medium | — | 2.25.2 and earlier | 2.25.3 |
March 23, 2023 |
| WF-d09a0b62-6556-4be5-a6f2-0cb0edcced3b | Medium | — | 2.25.2 and earlier | 2.25.3 |
March 23, 2023 |
| WF-a9939ffe-a5d5-45cb-b673-665acf1ff09d | Medium | — | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| CVE-2022-31475 | Medium | 0.8% | Before 2.21.0 | 2.21.0 |
July 21, 2022 |
| CVE-2026-65464 | Medium | 0.1% | 4.16.3 and earlier | 4.16.4 |
July 22, 2026 |
| CVE-2026-11981 | Medium | 0.2% | 0 to 4.15.3 (inclusive) | 4.15.4 |
July 1, 2026 |
| CVE-2025-67467 | Medium | 0.1% | 4.13.1 and earlier | 4.13.2 |
December 23, 2025 |
| CVE-2025-7221 | Medium | 0.2% | Before 4.6.1 | 4.6.1 |
August 21, 2025 |
| CVE-2024-47315 | Medium | 0.2% | 3.15.1 and earlier | 3.16.0 |
September 25, 2024 |
| CVE-2023-4248 | Medium | 0.2% | 2.33.3 and earlier | 2.33.4 |
January 11, 2024 |
| CVE-2023-4246 | Medium | 0.2% | 2.33.3 and earlier | 2.33.4 |
January 11, 2024 |
| WF-5ea02dd5-d837-471c-aa6a-264ffcedd55d | Medium | — | 2.25.2 and earlier | 2.25.3 |
March 23, 2023 |
| CVE-2023-25450 | Medium | 0.3% | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| WF-cb7ec7ad-797b-4a5c-9b1c-31284083faef | Medium | — | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |
| CVE-2022-40312 | Medium | 0.4% | 2.25.1 and earlier | 2.25.2 |
March 8, 2023 |