#givewp — Public Fediverse posts

#GiveWP #WordPress donation plugin flaw lets hackers execute server commands

https://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/

#cybersecurity

WordPress Flaws Expose Sites to Takeover, Code Execution

Critical vulnerabilities in popular WordPress plugins and themes have been exposed, putting sites at risk of takeover, remote code execution, and full compromise. Five flaws with near-maximum severity ratings have been disclosed, affecting specific versions of WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP.

https://osintsights.com/wordpress-flaws-expose-sites-to-takeover-code-execution?utm_source=mastodon&utm_medium=social

#WordpressVulnerabilities #Cve202682222 #Cve202676581 #Cvss #Givewp

#WordPress #Plugins mit Schwachstellen #updaten

#WPRocket, #GiveWP und #miniOrange

https://borncity.com/blog/2026/08/29/wordpress-plugins-wprocket-givewp-und/

GiveWP Plugin Flaw Lets Hackers Execute Server Commands

A critical flaw in the GiveWP WordPress donation plugin, known as CVE-2026-82222, allows hackers to run malicious commands on your server - and it's surprisingly easy to exploit. This maximum-severity vulnerability can be triggered by an unauthenticated attacker, putting your site at risk of a devastating takeover.

https://osintsights.com/givewp-plugin-flaw-lets-hackers-execute-server-commands?utm_source=mastodon&utm_medium=social

#Wordpress #Givewp #Cve202682222 #PluginVulnerability #RemoteCommandExecution

How to Migrate From GiveWP to Paymattic? (Step-by-Step Guide)
----------
Learn how to migrate from GiveWP to Paymattic using the GiveWP Migrator feature. Transfer donors,[…]
 
#WordPress #Guides #GiveWP #Paymattic

https://www.wpnews.io/how-to-migrate-from-givewp-to-paymattic-step-by-step-guide/

​​What’s Happening to GiveWP Right Now and What It Means for You?
----------
Why is GiveWP redirecting to Liquid Web? What happened to StellarWP? And should GiveWP users[…]
 
#WordPress #Uncategorized #GiveWP #LiquidWeb #StellarWP

https://www.wpnews.io/whats-happening-to-givewp-right-now-and-what-it-means-for-you/

I don't know. Nexcess. Liquid Web.

Sounds like this was drafted at a private equity desk with lots of spreadsheets, far away from the real web.

You have established brands like:

kadencewp.com
theeventscalendar.com
learndash.com
solidwp.com
givewp.com

And you put them in a blender, press the button and voila. Now all you have is Liquid Web dot com.

#WordPress #Kadence #TheEventsCalendar #LearnDash #SolidWP #GiveWP #LiquidWeb

https://www.therepository.email/liquid-web-retires-stellarwp-in-botched-rollout-drawing-backlash-from-customers-and-community

CVE Alert: CVE-2025-13206 - stellarwp - GiveWP – Donation Plugin and Fundraising Platform - https://www.redpacketsecurity.com/cve-alert-cve-2025-13206-stellarwp-givewp-donation-plugin-and-fundraising-platform/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-13206 #stellarwp #givewp-donation-plugin-and-fundraising-platform

@[email protected] @[email protected] hab den Fehler gehoben #Pihole #datenleck #leak #giveWP #Wordpress

Am 30. Juli 2025 wurde ein Datenleck bei Pi-hole bekannt. Ich habe selbst eine Benachrichtigung von „Have I been pwned“ erhalten und berichte hier aus erster Hand, was passiert ist, wer betroffen ist und was man jetzt tun sollte.

https://dasnetzundich.de/datenleck-bei-pi-hole-auch-meine-spender-e-mail-ist-betroffen/ #Pihole #datenleck #leak #giveWP #Wordpress

While the patch was released quickly, we were concerned by the 17.5-hour delay (“4 business hours”…) between the critical security fix and any official notification from the GiveWP team. However, In our view, their public statement did not sufficiently address the potential impact of exposing donor names and email addresses.

#WordPress-Plug-in: Kritische Lücke mit Höchstwertung in #GiveWP geschlossen | Security https://www.heise.de/news/WordPress-Plug-in-Kritische-Luecke-mit-Hoechstwertung-in-GiveWP-geschlossen-9842395.html #Patchday #WordPressPlugin

GiveWP (a WordPress donation plugin) released a critical security update today.

It patches a vulnerability that could be used by a malicious attacker to insert unwanted content in your WordPress website.

https://givewp.com/core-2-24-0-vulnerability-patched/

Update your plugin now!

#WordPress #GiveWP

This Week in WordPress #232 https://wpbuilds.com/2022/11/29/this-week-in-wordpress-232/ #WordPress #wpmisc #Sustainability #Breakdance #BuddyPress #ButterCMS #Diversity #Gutenberg #WordPress #Mastodon #security #WPBuilds #hosting #podcast #Amazon #GiveWP #Tumblr #Alexa #News