← All advisories

Critical severity10.0NVD Advisory· Published Aug 19, 2024· Updated Jun 17, 2026

CVE-2024-37099

CVE-2024-37099

Description

Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Givewp/Givewp
cpe:2.3:a:givewp:givewp:*:*:*:*:*:wordpress:*:*
Range: <3.14.2
WordPress/Givewpllm-fuzzy
Range: <=3.14.1
Package: https://wordpress.org/plugins/givewp
Liquid Web/GiveWPv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/give/wordpress-givewp-plugin-3-14-1-unauthenticated-php-object-injection-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.