Critical · 9.1 CVE-2022-28700 EUVD-2022-33142GHSA-h3xh-ghgc-6ph8

WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

Published Jul 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: GiveWP Product: GiveWP (WordPress plugin) Category: Web / CMS

Description

Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

Affected products

Vendor	Product	Affected	Fixed
GiveWP	GiveWP (WordPress plugin)	<= 2.20.2 – ≤ 2.20.2	—

References