NIXPKGS-2025-0006

published on

Permalink CVE-2025-47444

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): NONE

updated 6 months, 4 weeks ago by @Erethon Activity log

Created automatic suggestion 8 months ago
@Erethon accepted 6 months, 4 weeks ago
@Erethon published on GitHub 6 months, 4 weeks ago

WordPress GiveWP Plugin < 4.6.1 is vulnerable to Sensitive Data (PII) Exposure

Insertion of Sensitive Information Into Sent Data vulnerability in Liquid Web GiveWP allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a before 4.6.1.

References

https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-g… vdb-entry
https://github.com/impress-org/givewp/issues/8042 technical-descriptionissue-tracking
https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-g… vdb-entry
https://github.com/impress-org/givewp/issues/8042?_s_id=cve technical-descriptionissue-tracking

Affected products

give

<4.6.1

Matching in nixpkgs

pkgs.filegive

Easy p2p file sending program

nixos-unstable 2022-05-29
- nixpkgs-unstable 2022-05-29
- nixos-unstable-small 2022-05-29

Nixpkgs security tracker

Details of issue NIXPKGS-2025-0006

References

Affected products

Matching in nixpkgs

pkgs.filegive