What’s Vulnerable › Vulnerabilities

CVE-2020-20627

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-08-31 · updated 2026-06-17
• Weakness: CWE-306

Description

The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.

Affected products

• stellarwp GiveWP – Donation Plugin and Fundraising Platform: through 2.5.9

References

• https://blog.nintechnet.com/multiple-vulnerabilities-fixed-in-wordpress-givewp-plugin/
• https://blog.nintechnet.com/multiple-vulnerabilities-fixed-in-wordpress-givewp-plugin/

Get alerted when CVE-2020-20627 or the next vulnerability affects your stack