Information Exposure Vulnerability in GiveWP Donation Plugin for WordPress

CVE-2025-8620

What is CVE-2025-8620?

The GiveWP Donation Plugin for WordPress has a vulnerability that exposes sensitive donor information, including names, email addresses, and donor IDs. This flaw affects all versions of the plugin up to and including version 4.6.0, allowing unauthenticated attackers to extract the private data through unauthorized requests. It is crucial for users of the plugin to ensure they are using an updated version to protect donor data against unauthorized access and to maintain the integrity of their fundraising efforts.

References