Input validation vulnerability in GiveWP – Donation Plugin and Fundraising Platform 2.33.1

The Give – Donation Plugin for WordPress, up to version 2.33.0, is vulnerable to a security issue that could allow attackers to gain access to higher levels of privileges than they should have. If an attacker has already gained access to the Give Manager level privileges, they could use the plugin’s settings to change the default user role to an administrator role, giving them access to more advanced features and settings than they should have.