Description
Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Liquid Web | GiveWP | ≤ 3.14.1 | — |
Critical · 10.0
CVE-2024-37099
EUVD-2024-36426GHSA-wgh2-2342-mm46
WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability
Published Aug 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack