Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE

A critical vulnerability has been discovered in GiveWP, the popular WordPress donation plugin, putting over 100,000 sites at risk. The vulnerability is tracked as CVE-2025-0912 and carries a critical CVSS score of 9.8.