CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It affects WordPress. Its EPSS score suggests a 74.1% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-5932
Severity
CRITICAL
CVSS
10
EPSS
74.11%
WordPress
Original NVD Description
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.
Related CVEs
Other vulnerabilities affecting the same vendor(s)