CVE-2025-8620

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to extract donor names, emails, and donor id. CVE-2025-47444 is a duplicate of this issue. CVE-2025-47444 is a duplicate of this issue.

• CWE-200

• https://github.com/impress-org/givewp/issues/8042Issue Tracking
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3336253%40give&new=3336253%40give&sfp_email=&sfph_mail=Patch
• https://www.linkedin.com/posts/givewp_givewp-support-handpicked-from-the-best-activity-7356319738290974720-Dt4U/?utm_source=share&utm_medium=member_desktop&rcm=ACoAABmBk5UBxPIzCp0cgsD1_1xKASTMphetnI4Permissions Required
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc7c5a6-513e-4aa8-9538-0ac6fb37c867?source=cveThird Party Advisory

Published

Aug 6, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8614NoMachine Uncontrolled Search Path Element Local Privilege E…7.8
• CVE-2025-8615The CubeWP plugin for WordPress is vulnerable to Stored Cros…6.4
• CVE-2025-8616A weakness identified in OpenText Advanced Authentication wh…6.1
• CVE-2025-8617The YITH WooCommerce Quick View plugin for WordPress is vuln…6.4
• CVE-2025-8618The WPC Smart Quick View for WooCommerce plugin for WordPres…6.4
• CVE-2025-8619The OSM Map Widget for Elementor plugin for WordPress is vul…6.4
• CVE-2025-8621The Mosaic Generator plugin for WordPress is vulnerable to S…6.4
• CVE-2025-8622The Flexible Map plugin for WordPress is vulnerable to Store…6.4
• CVE-2025-8623The WeedMaps Menu for WordPress plugin for WordPress is vuln…6.4
• CVE-2025-8624The Nexa Blocks plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-8625The Copypress Rest API plugin for WordPress is vulnerable to…9.8
• CVE-2025-8627The TP-Link KP303 Smartplug can be issued unauthenticated pr…8.8