Medium · 5.5 CVE-2022-31475 EUVD-2022-52937GHSA-5267-2g9r-5cqx

WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Published Jul 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

Vendor	Product	Affected	Fixed
GiveWP	GiveWP (WordPress plugin)	<= 2.20.2 – ≤ 2.20.2	—