CVE-2021-24524: Givewp

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.

Affected products

• Givewp Givewp: before 2.12.0 (fixed in 2.12.0)

Published 2021-08-23. Last modified 2026-06-17.