Volerion logoVolerion
Volerion logoVolerion

StellarWP GiveWP Code Injection Vulnerability

Vulnerability

A code injection vulnerability has been identified in the StellarWP GiveWP plugin, specifically in versions through 4.13.1. This vulnerability allows for arbitrary code execution by improperly controlling the generation of code.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the server where the vulnerable WordPress site is hosted.

Added: Dec 9, 2025, 6:28 PM
Updated: Dec 10, 2025, 12:13 AM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
10.0
exploitability
7.6
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.