https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:26:21.475644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2025 CVE-2025-2025 — Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earning… 2026-10-06T19:26:21.495077+00:00

Affected: stellarwp GiveWP – Donation Plugin and Fundraising Platform

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the give_reports_earnings() function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to disclose sensitive information included within earnings reports.