CVE-2024-5932

概要

参考情報

• plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/login-register.php · Patch
• plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/process-donation.php · Patch
• plugins.trac.wordpress.org/browser/give/tags/3.12.0/src/DonorDashboards/Tabs/EditProfileTab/AvatarRoute.php · Patch
• plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/tecnickcom/tcpdf/tcpdf.php · Patch
• plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/vendor-prefixed/fakerphp/faker/src/Faker/ValidGenerator.php · Patch
• plugins.trac.wordpress.org/changeset/3132247 · Patch
• wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin · Third Party Advisory

givewp のその他の脆弱性

• CVE-2025-13206中 6.1The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ param…
• CVE-2025-11228中 5.3The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missi…
• CVE-2025-11227中 6.5The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and …
• CVE-2025-7221中 4.3The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missi…
• CVE-2025-8620中 5.3The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and …