Description
WordPress Plugin GiveWP-Donation and Fundraising Platform is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass API authentication methods and access personally identifiable user information. WordPress Plugin GiveWP-Donation and Fundraising Platform version 2.5.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.5 or latest