Insufficient Capability Check in GiveWP Donation Plugin for Unauthorized Access

CVE-2025-4571

What is CVE-2025-4571?

The GiveWP Donation Plugin and Fundraising Platform for WordPress contains a vulnerability that allows authenticated attackers, with Contributor-level access and higher, to perform unauthorized actions. This includes viewing and modifying fundraising campaigns and donor data due to an insufficient capability check in the permissionsCheck functions. Attackers could exploit this flaw to delete campaigns and access sensitive donor information, compromising the integrity of fundraising activities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References