CVE-2024-47315

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Sep 25, 2024

Updated: Sep 30, 2024

CWE ID 352

Summary

CVE-2024-47315 signifies a Cross-Site Request Forgery (CSRF) weakness in GiveWP, a popular WordPress donation plugin. The flaw, impacting versions from n/a to 3.15.1, permits unauthenticated attackers to manipulate users' sessions and execute malicious actions on their behalf. This can lead to financial loss, data theft, or other unintended consequences. Users are strongly advised to update their GiveWP plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

GiveWP

Affected Vendors

Givewp

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/y62m6q
https://www.cve.org/CVERecord?id=CVE-2024-47315
https://nvd.nist.gov/vuln/detail/CVE-2024-47315

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

US Violent Extremists Likely Shifting Focus to Targeted Physical Threats in 2025

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Know What Matters

For Customers

For Partners