Nixpkgs security tracker

Untriaged

Permalink CVE-2025-67467

4.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): NONE

created 4 months ago

WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request Forgery.This issue affects GiveWP: from n/a through <= 4.13.1.

References

https://vdp.patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpre… vdb-entry
https://patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpress-g… vdb-entry
https://patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpress-g… vdb-entry

Affected products

give

=<<= 4.13.1

Matching in nixpkgs

pkgs.filegive

Easy p2p file sending program

nixos-unstable 2022-05-29
- nixpkgs-unstable 2022-05-29
- nixos-unstable-small 2022-05-29
nixos-25.11 2022-05-29
- nixpkgs-25.11-darwin 2022-05-29

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.filegive