cleantalk
Vulnerabilities and Security Researches

GiveWP – Donation Plugin and Fundraising Platform, CVE-2020-20627

CVE, Research URL

CVE-2020-20627

Published on
Aug 31, 2020
Research Description
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.
Affected versions
Min -, max 2.5.10.
Status
vulnerable