Givewp (Wordpress Plugin) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Givewp (Wordpress Plugin), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-31475givewpgivewp+2
EPSS score
0.88%
Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.9.1CVE-2022-28700givewpgivewp+2
EPSS score
2.10%
Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.