A vulnerability categorized as critical has been discovered in GiveWP Plugin up to 4.10.0 on WordPress. This vulnerability affects the function
registerAssociateFormsWithCampaign
. Such manipulation leads to missing authorization.
This vulnerability is listed as CVE-2025-11228. The attack may be performed from remote. There is no available exploit.