Exploit for Deserialization of Untrusted Data in Givewp

CVE-2024-5932

githubexploit · 2025-11-04

Description

This PoC demonstrates a deserialization exploit for GiveWP vulnerability 2024-5932.

Affected Givewp versions

Givewp< 3.14.2

All known vulnerabilities by product

Givewp

CVSS 10.0 for CVE-2024-5932

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

74.3%higher than 99.4% of all CVEs

Updated 2026-08-06

Exploit Details

Modified:2025-11-04 19:09

Last Seen:2025-11-04 19:12

Reporter:autom4il

Written in:Python

Last commit:2025-11-04

Other exploits for CVE-2024-5932

CVE-2024-5932-web-ui

2026-09-02 KitPloitKITPLOIT

CVE-2024-5932

2026-09-02 KitPloitKITPLOIT

CVE-2024-8353

2026-09-02 KitPloitKITPLOIT

CVE-2024-5932

2026-08-31 KitPloitKITPLOIT

CVE-2024-5932

2026-08-27 KitPloitKITPLOIT

HackTheBox

2026-06-07 infantesromeroadrianGITHUB

Exploit for Deserialization of Untrusted Data in Givewp

2026-01-06 nishant-kumar-5173GITHUB

📄 WordPress GiveWP Donation 3.14.1 PHP Object Injection

2025-12-17 indoushkaPACKETSTORMPHP

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=A4826828-6F18-5ED6-9F8F-CB879847CD1B
# PoC for CVE-2024-5932

Exploit Code

Share

Share on social media: