The GiveWP plugin, used for donations and fundraising on WordPress, has a security issue. This means that anyone can change the data without permission. The problem is with the `registerAssociateFormsWithCampaign` function, and it affects all versions up to 4.10.0. This could allow people who are not logged in to link donation forms to any campaign.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
