GiveWP – Donation Plugin and Fundraising Platform vulnerabilities
Plugin slug give · 108 known vulnerabilities · latest disclosed 2026-11-04 · WordPress.org page
Every listed vulnerability has a fix. Version 4.19.1.1 or later is not affected by any of them. If your site runs an older version, update it.
24 of 108 rated high or critical (CVSS 7 or more).
Known vulnerabilities in GiveWP – Donation Plugin and Fundraising Platform
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| High 8.8 | <= 4.19.1 | 4.19.1.1 | CVE-2026-118193 | 2026-11-04 | Advisory |
| Medium 5.3 | <= 4.19.0.1 | 4.19.0.2 | CVE-2026-116853 | 2026-10-30 | Advisory |
| Medium 6.4 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111979 | 2026-10-23 | Advisory |
| Medium 4.3 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111980 | 2026-10-23 | Advisory |
| Medium 5.3 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111974 | 2026-10-23 | Advisory |
| Medium 4.3 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111981 | 2026-10-23 | Advisory |
| Medium 5.3 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111976 | 2026-10-23 | Advisory |
| Medium 6.5 | <= 4.19.0.0 | 4.19.0.1 | CVE-2026-111978 | 2026-10-23 | Advisory |
| Medium 6.4 | <= 4.17.0 | 4.18.0 | CVE-2026-97643 | 2026-10-09 | Advisory |
| Medium 5.3 | <= 4.18.0 | 4.18.0.1 | CVE-2026-106600 | 2026-10-08 | Advisory |
| High 7.2 | <= 4.17.0 | 4.18.0 | CVE-2026-104672 | 2026-10-05 | Advisory |
| High 7.3 | <= 4.17.0 | 4.18.0 | CVE-2026-104405 | 2026-10-05 | Advisory |
| Medium 6.4 | <= 4.17.0 | 4.18.0 | CVE-2026-104404 | 2026-10-05 | Advisory |
| Medium 5.3 | <= 4.16.8.1 | 4.16.9 | CVE-2026-96333 | 2026-10-02 | Advisory |
| High 7.2 | <= 4.16.9 | 4.17.0 | CVE-2026-96830 | 2026-09-24 | Advisory |
| Medium 5.3 | <= 4.16.9 | 4.17.0 | CVE-2026-97196 | 2026-09-24 | Advisory |
| Medium 4.3 | <= 4.16.9 | 4.17.0 | CVE-2026-96834 | 2026-09-24 | Advisory |
| Medium 5.3 | <= 4.16.9 | 4.17.0 | CVE-2026-97066 | 2026-09-24 | Advisory |
| Medium 6.5 | <= 4.16.8 | 4.16.9 | CVE-2026-85113 | 2026-09-18 | Advisory |
| High 7.3 | <= 4.16.8.0 | 4.16.8.1 | CVE-2026-85530 | 2026-09-14 | Advisory |
| Critical 9.8 | <= 4.16.7.1 | 4.16.7.2 | CVE-2026-82222 | 2026-08-28 | Advisory |
| Medium 6.4 | <= 4.14.4 | 4.14.5 | CVE-2026-5510 | 2026-08-27 | Advisory |
| Medium 5.3 | < 4.16.6 | 4.16.6 | CVE-2026-73348 | 2026-08-14 | Advisory |
| Medium 5.3 | <= 4.16.5.1 | 4.16.6 | CVE-2026-73352 | 2026-08-14 | Advisory |
| Medium 5.3 | < 4.16.6 | 4.16.6 | CVE-2026-73349 | 2026-08-12 | Advisory |
| Medium 6.4 | < 4.16.6 | 4.16.6 | CVE-2026-73357 | 2026-08-12 | Advisory |
| Medium 5.3 | < 4.16.3 | 4.16.3 | CVE-2026-14317 | 2026-08-04 | Advisory |
| High 7.2 | <= 4.16.5 | 4.16.5.1 | CVE-2026-66690 | 2026-07-31 | Advisory |
| Medium 6.4 | < 4.16.3 | 4.16.3 | CVE-2026-14318 | 2026-07-30 | Advisory |
| High 7.2 | <= 4.16.3 | 4.16.4 | CVE-2026-65441 | 2026-07-27 | Advisory |
| Medium 4.3 | <= 4.16.3 | 4.16.4 | CVE-2026-65464 | 2026-07-22 | Advisory |
| Medium 6.4 | <= 4.16.3 | 4.16.4 | CVE-2026-14987 | 2026-07-15 | Advisory |
| Medium 5.3 | <= 4.16.2 | 4.16.3 | CVE-2026-14319 | 2026-07-13 | Advisory |
| Medium 6.4 | <= 4.16.1 | 4.16.2 | CVE-2026-13704 | 2026-07-01 | Advisory |
| Medium 4.3 | <= 4.15.3 | 4.15.4 | CVE-2026-11981 | 2026-06-30 | Advisory |
| Medium 6.4 | <= 4.16.0 | 4.16.1 | CVE-2026-13246 | 2026-06-30 | Advisory |
| High 7.2 | <= 4.14.5 | 4.14.6 | CVE-2026-42678 | 2026-05-16 | Advisory |
| Medium 6.1 | <= 4.14.2 | 4.14.3 | CVE-2026-34900 | 2026-04-21 | Advisory |
| Medium 5.3 | <= 4.14.5 | 4.14.6 | CVE-2026-42642 | 2026-03-02 | Advisory |
| Medium 6.5 | <= 4.13.1 | 4.13.2 | CVE-2025-66533 | 2026-01-08 | Advisory |
| Medium 4.3 | <= 4.13.1 | 4.13.2 | CVE-2025-67467 | 2025-12-23 | Advisory |
| High 7.2 | <= 4.13.0 | 4.13.1 | CVE-2025-13206 | 2025-11-18 | Advisory |
| Medium 6.5 | <= 4.10.0 | 4.10.1 | CVE-2025-11227 | 2025-10-03 | Advisory |
| Medium 5.3 | <= 4.10.0 | 4.10.1 | CVE-2025-11228 | 2025-10-03 | Advisory |
| Medium 4.3 | <= 4.5.0 | 4.6.1 | CVE-2025-7221 | 2025-08-20 | Advisory |
| Medium 5.3 | <= 4.6.0 | 4.6.1 | CVE-2025-8620 | 2025-08-05 | Advisory |
| Medium 5.4 | <= 4.5.0 | 4.6.0 | CVE-2025-7205 | 2025-07-30 | Advisory |
| Medium 5.4 | <= 4.3.0 | 4.3.1 | CVE-2025-4571 | 2025-06-18 | Advisory |
| Medium 5.3 | <= 3.22.1 | 3.22.2 | CVE-2025-2331 | 2025-03-21 | Advisory |
| Medium 6.5 | <= 3.22.0 | 3.22.1 | CVE-2025-2025 | 2025-03-14 | Advisory |
| Critical 9.8 | <= 3.19.4 | 3.20.0 | CVE-2025-0912 | 2025-03-03 | Advisory |
| Critical 9.8 | <= 3.19.3 | 3.19.4 | CVE-2025-22777 | 2025-01-10 | Advisory |
| Critical 9.8 | <= 3.19.2 | 3.19.3 | CVE-2024-12877 | 2025-01-10 | Advisory |
| Medium 6.1 | <= 3.18.0 | 3.19.0 | CVE-2024-11921 | 2024-12-06 | Advisory |
| Critical 9.8 | <= 3.16.3 | 3.16.4 | CVE-2024-9634 | 2024-10-15 | Advisory |
| Critical 9.8 | <= 3.16.1 | 3.16.2 | CVE-2024-8353 | 2024-09-27 | Advisory |
| High 7.2 | <= 3.16.1 | 3.16.2 | CVE-2024-9130 | 2024-09-26 | Advisory |
| Medium 4.3 | <= 3.15.1 | 3.16.0 | CVE-2024-47315 | 2024-09-25 | Advisory |
| Medium 5.3 | <= 3.15.1 | 3.16.0 | CVE-2024-6551 | 2024-08-28 | Advisory |
| Critical 10 | <= 3.14.1 | 3.14.2 | CVE-2024-5932 | 2024-08-19 | Advisory |
| Medium 5.4 | <= 3.14.1 | 3.14.2 | CVE-2024-5941 | 2024-08-19 | Advisory |
| Medium 5.3 | <= 3.13.0 | 3.14.0 | CVE-2024-5939 | 2024-08-19 | Advisory |
| Medium 6.5 | <= 3.13.0 | 3.14.0 | CVE-2024-5940 | 2024-08-19 | Advisory |
| High 8.1 | <= 3.14.1 | 3.14.2 | CVE-2024-37099 | 2024-08-09 | Advisory |
| Medium 5.4 | <= 3.13.0 | 3.14.0 | CVE-2024-5977 | 2024-07-18 | Advisory |
| Medium 6.1 | <= 3.12.0 | 3.12.1 | CVE-2024-35679 | 2024-06-06 | Advisory |
| Medium 6.4 | <= 3.10.0 | 3.11.0 | CVE-2024-3714 | 2024-05-17 | Advisory |
| High 8.8 | <= 3.4.2 | 3.5.0 | CVE-2024-30229 | 2024-04-26 | Advisory |
| Medium 6.4 | <= 3.6.1 | 3.7.0 | CVE-2024-1957 | 2024-04-12 | Advisory |
| Medium 6.4 | <= 3.5.1 | 3.6.0 | CVE-2024-1424 | 2024-03-19 | Advisory |
| Medium 6.1 | <= 3.3.1 | 3.4.0 | CVE-2024-27987 | 2024-03-15 | Advisory |
| Medium 6.4 | <= 3.2.2 | 3.3.0 | CVE-2023-51415 | 2024-01-19 | Advisory |
| Medium 5.4 | <= 2.33.3 | 2.33.4 | CVE-2023-4248 | 2023-10-31 | Advisory |
| Medium 4.3 | <= 2.33.3 | 2.33.4 | CVE-2023-4246 | 2023-10-31 | Advisory |
| Medium 5.4 | <= 2.33.3 | 2.33.4 | CVE-2023-4247 | 2023-10-31 | Advisory |
| High 7.2 | < 2.33.1 | 2.33.1 | CVE-2023-41665 | 2023-08-31 | Advisory |
| Medium 6.6 | <= 2.25.3 | 2.26.0 | CVE-2023-32513 | 2023-05-10 | Advisory |
| Medium 4.3 | <= 2.25.2 | 2.25.3 | none | 2023-03-23 | Advisory |
| Medium 5.3 | <= 2.25.2 | 2.25.3 | none | 2023-03-23 | Advisory |
| Medium 5.3 | <= 2.25.2 | 2.25.3 | none | 2023-03-23 | Advisory |
| Medium 5.4 | <= 2.25.1 | 2.25.2 | CVE-2023-23672 | 2023-03-10 | Advisory |
| Medium 6.4 | <= 2.25.1 | 2.25.2 | CVE-2022-40211 | 2023-03-10 | Advisory |
| Medium 4.1 | <= 2.25.1 | 2.25.2 | CVE-2022-40312 | 2023-03-08 | Advisory |
| Medium 6.1 | <= 2.25.1 | 2.25.2 | none | 2023-03-08 | Advisory |
| High 8.3 | <= 2.25.1 | 2.25.2 | CVE-2023-22719 | 2023-03-08 | Advisory |
| Medium 5.4 | <= 2.25.1 | 2.25.2 | none | 2023-03-08 | Advisory |
| Medium 4.3 | <= 2.25.1 | 2.25.2 | CVE-2023-25450 | 2023-03-08 | Advisory |
| Medium 4.3 | <= 2.25.1 | 2.25.2 | none | 2023-03-08 | Advisory |
| Medium 6.4 | <= 2.25.1 | 2.25.2 | CVE-2023-23668 | 2023-03-08 | Advisory |
| Critical 9.8 | <= 2.23.2 | 2.24 | CVE-2023-0224 | 2023-01-19 | Advisory |
| Medium 6.4 | <= 2.23.2 | 2.24 | CVE-2022-4448 | 2023-01-19 | Advisory |
| Medium 4.9 | <= 2.20.2 | 2.21.0 | CVE-2022-31475 | 2022-07-12 | Advisory |
| Medium 5.5 | <= 2.20.2 | 2.21.0 | CVE-2022-28700 | 2022-07-12 | Advisory |
| Medium 5.5 | <= 2.21.2 | 2.21.3 | CVE-2022-2215 | 2022-07-11 | Advisory |
| Medium 4.3 | <= 2.21.2 | 2.21.3 | CVE-2022-2260 | 2022-07-08 | Advisory |
| Medium 5.3 | <= 2.20.2 | 2.21.0 | CVE-2022-2117 | 2022-06-17 | Advisory |
| Medium 4.8 | < 2.17.3 | 2.17.3 | CVE-2022-0252 | 2022-01-18 | Advisory |
| Medium 6.1 | < 2.17.3 | 2.17.3 | CVE-2021-25100 | 2022-01-18 | Advisory |
| Medium 6.1 | < 2.17.3 | 2.17.3 | CVE-2021-25099 | 2022-01-18 | Advisory |
| Medium 4.8 | < 2.12.0 | 2.12.0 | CVE-2021-24524 | 2021-07-26 | Advisory |
| Medium 4.8 | < 2.10.4 | 2.10.4 | CVE-2021-24315 | 2021-04-30 | Advisory |
| Medium 6.1 | 2.4.0 to 2.10.0 | 2.10.0 | CVE-2021-24213 | 2021-03-23 | Advisory |
| Medium 5.3 | < 2.5.10 | 2.5.10 | CVE-2020-20627 | 2019-10-30 | Advisory |
| High 7.5 | <= 2.5.4 | 2.5.5 | CVE-2019-20360 | 2019-09-26 | Advisory |
| Critical 9.8 | <= 2.5.0 | 2.5.1 | CVE-2019-13578 | 2019-08-12 | Advisory |
| Medium 5.4 | < 2.4.7 | 2.4.7 | CVE-2019-15317 | 2019-05-15 | Advisory |
| Medium 6.1 | < 2.3.1 | 2.3.1 | CVE-2019-9909 | 2019-02-05 | Advisory |
| Medium 6.1 | < 0.8.5 | 0.8.5 | none | 2015-04-20 | Advisory |
Check if a site is affected
Enter a site address to see which version of GiveWP – Donation Plugin and Fundraising Platform and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the GiveWP – Donation Plugin and Fundraising Platform plugin safe to use?
All 108 known issues are fixed in current versions (4.19.1.1 or later). Keeping it updated is what matters.
How do I check which version of GiveWP – Donation Plugin and Fundraising Platform my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.
Check any WordPress site in one click while you browse: Add PluginPeek to Chrome