Skip to content
PluginCanary

GiveWP - Donation Plugin and Fundraising Platform

by Nexcess · 100,000+ active installs · Checked 3 Nov 2026
Healthy25 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 4.19.0.2.

84/ 100 Canary Score
Sub-scores for GiveWP - Donation Plugin and Fundraising Platform
Ownership100
Maintenance100
Security60
Support93
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.19.0.2. Update to version 4.19.0.2 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 4.19.0.1. Update to version 4.19.0.1 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.18.0. Update to version 4.18.0 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 4.18.0.1. Update to version 4.18.0.1 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.18.0. Update to version 4.18.0 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.18.0. Update to version 4.18.0 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.18.0. Update to version 4.18.0 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.16.9. Update to version 4.16.9 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.17.0. Update to version 4.17.0 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.17.0. Update to version 4.17.0 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.17.0. Update to version 4.17.0 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.17.0. Update to version 4.17.0 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.16.9. Update to version 4.16.9 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.16.8.1. Update to version 4.16.8.1 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 4.16.7.2. Update to version 4.16.7.2 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 27 Aug 2026, fixed in 4.14.5. Update to version 4.14.5 or later.27 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 4.16.6. Update to version 4.16.6 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 4.16.6. Update to version 4.16.6 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 12 Aug 2026, fixed in 4.16.6. Update to version 4.16.6 or later.12 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 12 Aug 2026, fixed in 4.16.6. Update to version 4.16.6 or later.12 Aug 2026Evidence
  • InfoSEC-353 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dlocc7 Apr 2015 to 24 Mar 2022, 213 commits
webdevmattcrom14 Jul 2015 to 17 Jan 2022, 31 commits
jason_the_adams8 Oct 2020 to 22 Oct 2024, 135 commits
givewp6 Nov 2024 to 3 Nov 2026, 73 commits
bordoni14 Feb 2025 to 14 Feb 2025, 1 commits
jonwaldstein4 Aug 2025 to 4 Aug 2025, 1 commits

6 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
today
Releases, 24 months
73
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for GiveWP - Donation Plugin and Fundraising Platform
Q1 20249
Q2 202411
Q3 20248
Q4 202411
Q1 20258
Q2 20258
Q3 20258
Q4 20257
Q1 20264
Q2 202611
Q3 202614
Q4 20267

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

93% of 14 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.19.0.1 - Missing Authorization5.3<= 4.19.0.14.19.0.20
23 Oct 2026GiveWP <= 4.19.0.0 - Missing Authorization4.3<= 4.19.0.04.19.0.10
23 Oct 2026GiveWP <= 4.19.0.0 - Unauthenticated Donation Amount Restriction Bypass5.3<= 4.19.0.04.19.0.10
23 Oct 2026GiveWP <= 4.19.0.0 - Authenticated (Give Worker+) Stored Cross-Site Scripting6.4<= 4.19.0.04.19.0.10
23 Oct 2026GiveWP <= 4.19.0.0 - Authenticated (Give Manager+) Path Traversal6.5<= 4.19.0.04.19.0.10
23 Oct 2026GiveWP <= 4.19.0.0 - Unauthenticated Information Exposure5.3<= 4.19.0.04.19.0.10
23 Oct 2026GiveWP <= 4.19.0.0 - Missing Authorization4.3<= 4.19.0.04.19.0.10
9 Oct 2026GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes6.4<= 4.17.04.18.00
8 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.18.0 - Missing Authorization5.3<= 4.18.04.18.0.10
5 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.17.04.18.00
5 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Privilege Escalation7.3<= 4.17.04.18.00
5 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.17.04.18.00
2 Oct 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.8.1 - Unauthenticated Payment Bypass5.3<= 4.16.8.14.16.90
24 Sep 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated User Impersonation5.3<= 4.16.94.17.00
24 Sep 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.16.94.17.00
24 Sep 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Insecure Direct Object Reference5.3<= 4.16.94.17.00
24 Sep 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information Exposure4.3<= 4.16.94.17.00
18 Sep 2026GiveWP <= 4.16.8 - Unauthenticated Arbitrary Shortcode Execution6.5<= 4.16.84.16.90
14 Sep 2026GiveWP <= 4.16.8.0 - Unauthenticated Privilege Escalation7.3<= 4.16.8.04.16.8.10
28 Aug 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.7.1 - Unauthenticated PHP Object Injection to Remote Code Execution9.8<= 4.16.7.14.16.7.20
27 Aug 2026GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 4.14.44.14.50
14 Aug 2026GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization5.3< 4.16.64.16.60
14 Aug 2026GiveWP – Donation Plugin and Fundraising Platform <= 4.16.5.1 - Missing Authorization5.3<= 4.16.5.14.16.60
12 Aug 2026GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Authenticated (Donor+) Stored Cross-Site Scripting6.4< 4.16.64.16.60
12 Aug 2026GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization5.3< 4.16.64.16.60

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for GiveWP - Donation Plugin and Fundraising Platform
Q4 20254.5
Q1 20264.7
Q2 20265.0
Q3 20263.7
Q4 20261.0

Average rating fell from 4.5 to 1.0 between Q4 2025 and Q4 2026.

Rating distribution
5 star622
4 star18
3 star10
2 star9
1 star49
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for GiveWP - Donation Plugin and Fundraising Platform
4 May 20268,550
11 May 2026140,969
18 May 202621,923
25 May 202653,572
1 Jun 202612,740
8 Jun 20268,719
15 Jun 202654,303
22 Jun 202697,061
29 Jun 2026103,842
6 Jul 202664,105
13 Jul 202661,823
20 Jul 202656,113
27 Jul 202661,538
3 Aug 202660,280
10 Aug 202664,641
17 Aug 202660,680
24 Aug 2026100,821
31 Aug 202660,682
7 Sep 202658,830
14 Sep 202662,492
21 Sep 202659,700
28 Sep 202653,652
5 Oct 202664,466
12 Oct 202653,603
19 Oct 202653,826
26 Oct 2026105,117
2 Nov 20262,319

Weekly downloads over the last 4 weeks are 10% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Donorbox - Free Recurring Donation Plugin and Fundraising PlatformScore 91 · 8,000+Donation Platform for WooCommerce: Fundraising & Donation ManagementScore 91 · 6,000+SureDonation - Donation Forms, Fundraising Campaigns & Donor ManagementScore 91 · 4,000+Buy Me a Coffee - Button and Widget PluginScore 90 · 6,000+Ultimeter - the Ultimate Progress and Goals MeterScore 89 · 1,000+

Facts

Version4.19.1.1
AuthorNexcess
Added7 Apr 2015
Last updated3 Nov 2026
Active installs100,000+
Requires WordPress6.9
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping > Digital Products & Downloads
Tagsdonate, donation, fundraising, crowdfunding, recurring donations

Other plugins by this author: Kadence Security - Password, Two Factor Authentication, and Brute Force Protection, The Events Calendar, Kadence Blocks - Page Builder Toolkit for Gutenberg Editor, Kadence Starter Templates - Predesigned Website Templates, Image Widget, Kadence WooCommerce Email Designer, Event Tickets and Registration, Virtue/Ascend/Pinnacle Toolkit, Kadence Central - Site Management, Backups, Security, and Reporting, Membership Plugin - Kadence Memberships, GiveWP Donation Widgets for Elementor, Advanced Post Manager

Questions

Is GiveWP - Donation Plugin and Fundraising Platform still maintained?

GiveWP - Donation Plugin and Fundraising Platform was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is GiveWP - Donation Plugin and Fundraising Platform safe?

GiveWP - Donation Plugin and Fundraising Platform has no open unpatched vulnerabilities on record. 53 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns GiveWP - Donation Plugin and Fundraising Platform?

The wordpress.org author is Nexcess. Recent committers: givewp, jonwaldstein, bordoni, jason_the_adams, dlocc. We have recorded no ownership change.

What can I use instead of GiveWP - Donation Plugin and Fundraising Platform?

Plugins in the same category with a higher Canary Score: Donorbox - Free Recurring Donation Plugin and Fundraising Platform, Donation Platform for WooCommerce: Fundraising & Donation Management, SureDonation - Donation Forms, Fundraising Campaigns & Donor Management, Buy Me a Coffee - Button and Widget Plugin, Ultimeter - the Ultimate Progress and Goals Meter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue