PT-2025-40616 · WordPress · Givewp – Donation Plugin/Fundraising Platform

Rafshanzani Suhada

·

CVE-2025-11228

·

Published

2025-10-04

·

Updated

2025-10-04

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.10.1
Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress has a flaw that allows unauthorized modification of data. A missing capability check within the registerAssociateFormsWithCampaign function permits unauthenticated attackers to associate any donation forms with any campaign.
Recommendations Update to version 4.10.1 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-11228

Affected Products

Givewp – Donation Plugin/Fundraising Platform