WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection
CVE-2023-32513
7.5HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 28 December 2023
What is CVE-2023-32513?
A deserialization of untrusted data vulnerability exists in the GiveWP Donation Plugin. This security flaw can allow attackers to exploit weaknesses related to PHP object injection, potentially leading to unauthorized access or system manipulation. It affects all versions of the GiveWP Donation Plugin and Fundraising Platform prior to 2.25.3, necessitating immediate updates to safeguard against potential exploitation. Users are urged to review their current plugin status and apply necessary patches to mitigate risks.
Affected Version(s)
GiveWP – Donation Plugin and Fundraising Platform <= 2.25.3