CVE-2025-2025

Summary

CVE-2025-2025 is a vulnerability affecting the GiveWP – Donation Plugin and Fundraising Platform for WordPress. The issue lies in the give_reports_earnings() function, which lacks sufficient capability checks. As a result, unauthenticated attackers can exploit this weakness to gain unauthorized access to sensitive earnings report data. This vulnerability poses a significant risk, as the disclosure of such information can lead to privacy violations and potential financial loss. Users of affected versions (up to and including 3.22.0) are urged to update to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.