CVE Daily

CVE-2025-8620

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vu...

Medium CVSS 5.3

Overview

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to extract donor names, emails, and donor id.

CWE: CWE-200 Published: 2025-08-06T10:15:35.967
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.3 (MEDIUM)
  • Detected tags: info_leak, wordpress (tag impact: LOW)

Recommended actions:

  • Reduce verbose errors, remove debug endpoints, minimize PII in logs.

Recommended tools

Tags