CVE-2024-5932Active Exploitation(givewp / givewp)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for givewp givewp systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • givewp

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
givewp

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-02: 1Active Exploitation · 2026-09-02: 1Technical Details · 2026-09-02: 109-02
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploiting CVE-2024-5932 within days to bypass JFrog Artifactory authentication and mint admin tokens. They then enumerated users and systems to identify pathways into connected build pipelines. Runtime segmentation helps contain post-compromise activity across development infrastructure. #SupplyChainSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/jfrog-artifactory-cve-2026-82329-authentication-bypass-exploitation

    Post summary

    TRC analysis reveals attackers rapidly exploiting CVE-2024-5932 to bypass JFrog Artifactory authentication and obtain admin tokens, confirming active in‑the‑wild exploitation.

    0000059
    2.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgivewpgivewp-wordpress-

Explore more