As cited
Copy frozen at (site build).
vulnerabilities
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A critical vulnerability in the GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The flaw carries maximum severity and affects any site running the vulnerable plugin without authentication requirements.
Why it matters: WordPress site administrators using GiveWP need to patch immediately, as attackers can gain remote code execution (RCE) on their servers without credentials.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A critical vulnerability in the GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The flaw carries maximum severity and affects any site running the vulnerable plugin without authentication requirements.
Why it matters: WordPress site administrators using GiveWP need to patch immediately, as attackers can gain remote code execution (RCE) on their servers without credentials.
- Source published
- First seen by Cybersecurity Tracker