GiveWP WordPress donation plugin flaw lets hackers execute server commands

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. The flaw, which has not yet been assigned a CVE, poses a critical risk to websites using the donation plugin. Users are advised to update to the latest version as soon as a patch is available.