Threats tagged 'ghsa-r3pc-c6qw-qwpc'

GiveWP WordPress plugin versions before 4.16.3 contain a missing authorization vulnerability that allows unauthenticated users to use payment gateways disabled by the administrator to complete donations. This occurs because the plugin does not properly restrict payment gateway selection, partially relying on request input. The vulnerability has a medium severity rating with a CVSS score of 5.3.