Nixpkgs security tracker

Untriaged

Permalink CVE-2025-66533

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 4 months ago

WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through <= 4.13.1.

References

https://vdp.patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpre… vdb-entry
https://patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpress-g… vdb-entry
https://patchstack.com/database/Wordpress/Plugin/give/vulnerability/wordpress-g… vdb-entry

Affected products

give

=<<= 4.13.1

Matching in nixpkgs

pkgs.filegive

Easy p2p file sending program

nixos-unstable 2022-05-29
- nixpkgs-unstable 2022-05-29
- nixos-unstable-small 2022-05-29
nixos-25.11 2022-05-29
- nixpkgs-25.11-darwin 2022-05-29

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.filegive