Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Vulnerabilities - CVE-2022-28700 - Vulnerability Database
WP Plugin Give

WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Vulnerabilities - CVE-2022-28700

Medium
Reference: CVE-2022-28700
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-28700
Title: WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Vulnerabilities
Overview:

WordPress Plugin GiveWP-Donation and Fundraising Platform is prone to multiple vulnerabilities including cross-site scripting arbitrary file creation and arbitrary file access vulnerabilities. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site allowing the attacker to steal cookie-based authentication credentials to create arbitrary files or to read arbitrary files on the web server. WordPress Plugin GiveWP-Donation and Fundraising Platform version 2.20.2 is vulnerable prior versions may also be affected.