GiveWP WordPress donation plugin flaw lets attackers execute server commands

A maximum-severity vulnerability in the GiveWP WordPress plugin allows an unauthenticated attacker to execute arbitrary commands on the hosting server. The vulnerability affects GiveWP through version 4.16.7.1 and was fixed in version 4.16.7.2.