Input validation vulnerability in GiveWP – Donation Plugin and Fundraising Platform 3.16.3

The GiveWP Donation Plugin and Fundraising Platform plugin for WordPress has a security issue that could allow attackers to inject malicious code and gain access to the site. This vulnerability affects all versions up to and including 3.16.3 and is caused by input from the “give_company_name” parameter. This could be exploited by unauthorized individuals to execute remote code on the website.

Detected in:

GiveWP – Donation Plugin and Fundraising Platform fixed vulnerable versions: >= * <= 3.16.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.