Input validation vulnerability in GiveWP – Donation Plugin and Fundraising Platform 2.33.3

The GiveWP plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery in versions 2.33.3 and earlier. This type of attack occurs when someone tricks a website administrator into clicking on a link or performing another action. In this case, the attack could allow an unauthenticated person to deactivate the SendWP plugin without proper validation of a nonce, which is a security measure.