CveMateVulnerability intelligence

Stellarwp vulnerabilities

143 vulnerabilities

Known vulnerabilities in Stellarwp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 19 products.

Products

19

Givewp – Donation Plugin And Fundraising Platform33 vulnerabilities
Kadence Blocks — Page Builder Toolkit For Gutenberg Editor30 vulnerabilities
The Events Calendar26 vulnerabilities
Givewp9 vulnerabilities
Event Tickets And Registration8 vulnerabilities
Learndash LMS7 vulnerabilities
Membership Plugin – Restrict Content7 vulnerabilities
Wpcomplete4 vulnerabilities
Bookit — Booking & Appointment Calendar3 vulnerabilities
Event Tickets3 vulnerabilities
Gutenberg Blocks By Kadence Blocks3 vulnerabilities
Kadence Woocommerce Email Designer3 vulnerabilities
Image Widget2 vulnerabilities
Restrict Content2 vulnerabilities
Give – Divi Donation Modules1 vulnerabilities
Ithemes Sync1 vulnerabilities
Learndash LMS – Reports1 vulnerabilities
Membership Plugin – Kadence Memberships1 vulnerabilities
Virtue1 vulnerabilities

CVE-2025-54697stellarwpkadence woocommerce email designer+11y ago14-08-2025 10:34

Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Privilege Escalation.This issue affects Kadence WooCommerce Email Designer: from n/a through <= 1.5.16.CVE-2025-2025givewpgivewp+21y ago15-03-2025 11:13

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the give_reports_earnings() function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to disclose sensitive information included within earnings reports.CVE-2025-2331givewpgivewp+21y ago22-03-2025 11:18

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.22.1 via a misconfigured capability check in the 'permissionsCheck' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including reports detailing donors and donation amounts.CVE-2025-13206givewpgivewp+211mo ago19-11-2025 07:46

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Avatars must be enabled in the WordPress install in order to exploit the vulnerability.CVE-2025-13387stellarwpkadence woocommerce email designer+110mo ago02-12-2025 04:37

The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.5.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-1402stellarwpevent tickets and registration+21y ago21-02-2025 11:09

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajax_ticket_delete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary Attendee tickets.CVE-2025-1291stellarwpkadence blocks — page builder toolkit for gutenberg editor+11y ago01-03-2025 08:23

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icon’ parameter in all versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-62027stellarwpevent tickets+112mo ago22-10-2025 14:32

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through <= 5.26.3.CVE-2025-11517stellarwpevent tickets and registration+11y ago18-10-2025 06:42

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment. This makes it possible for unauthenticated attackers to obtain access to paid tickets, without paying for them, causing a loss of revenue for the target.CVE-2025-11227givewpgivewp+21y ago04-10-2025 02:24

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check. This makes it possible for unauthenticated attackers to extract data from private and draft donation forms, as well as archived campaigns.CVE-2025-11228givewpgivewp+21y ago04-10-2025 02:24

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `registerAssociateFormsWithCampaign` function in all versions up to, and including, 4.10.0. This makes it possible for unauthenticated attackers to associate any donation forms with any campaign.CVE-2025-48246stellarwpthe_events_calendar+11y ago19-05-2025 14:44

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through <= 6.11.2.1.CVE-2025-0912givewpgivewp+21y ago04-03-2025 03:37

The Donations Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.4 via deserialization of untrusted input from the Donation Form through the 'card_address' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution.CVE-2025-9808stellarwpthe_events_calendar+11y ago16-09-2025 05:25

The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.15.2 via the REST endpoint. This makes it possible for unauthenticated attackers to extract information about password-protected vendors or venues.CVE-2025-9807stellarwpthe_events_calendar+11y ago12-09-2025 01:46

The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2025-14844liquidwebrestrict_content+29mo ago16-01-2026 09:23

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, the plugin does not check a user-controlled key, which makes it possible for unauthenticated attackers to leak Stripe SetupIntent client_secret values for any membership.CVE-2025-14000stellarwpmembership plugin – restrict content+110mo ago23-12-2025 11:13

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'register_form' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-4571givewpgivewp+21y ago19-06-2025 06:44

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on the permissionsCheck functions in all versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to view or delete fundraising campaigns, view donors' data, modify campaign events, etc.CVE-2025-39557stellarwpkadence woocommerce email designer+11y ago16-04-2025 12:44

Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Upload a Web Shell to a Web Server.This issue affects Kadence WooCommerce Email Designer: from n/a through <= 1.5.14.CVE-2025-7205givewpgivewp+21y ago31-07-2025 07:25

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with GiveWP worker-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additionally, they need to trick an administrator into visiting the legacy version of the site.