CyberRota Analysis
AI-GeneratedThe GiveWP WordPress plugin prior to version 4.16.3 is vulnerable due to improper access controls on a REST API endpoint, enabling unauthenticated users to access sensitive information about recurring donors, such as names and subscription details. This exposure poses a significant privacy risk, particularly for sites handling donor data. WordPress site administrators using the affected plugin should prioritize updating to the latest version to mitigate this high-severity vulnerability.
Original NVD Description
The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retrieve information about anonymous recurring donors, including their name and subscription details.