Description
WordPress Plugin GiveWP-Donation and Fundraising Platform is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin settings. WordPress Plugin GiveWP-Donation and Fundraising Platform version 2.5.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.10 or latest
References
Related Vulnerabilities
WordPress Plugin Relevanssi-A Better Search 'Seach Query' Field HTML Injection (2.7.2)
MySQL CVE-2019-2739 Vulnerability (CVE-2019-2739)
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.14)
WordPress Plugin FileBird-WordPress Media Library Folders & File Manager Cross-Site Scripting (2.4)
Apache Tomcat Improperly Implemented Security Check for Standard Vulnerability (CVE-2017-15706)