title: GiveWP < 2.24.1 - Unauthenticated SQLi
description: The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform SQL Injection attacks
problem types: CWE-89 SQL Injection
affected:
{
vendor: Unknown
product: GiveWP
versions:
status: affected, versionType: semver, version: 0, lessThan: 2.24.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}