Input validation vulnerability in GiveWP – Donation Plugin and Fundraising Platform 4.13.0

The GiveWP plugin for WordPress, which helps with donations and fundraising, has a security issue that can be exploited by hackers. This is because the plugin does not properly clean and protect user input, allowing attackers to add their own code to web pages. This can affect any version of the plugin up to 4.13.0 and can be done by anyone without needing to log in. However, for the attack to work, avatars must be turned on in the WordPress site.