CVE-2019-20360

CVE-2019-20360 is a high-severity authentication bypass vulnerability affecting the Give WordPress plugin prior to version 2.5.5. Unauthenticated attackers could exploit this flaw by manipulating API keys and tokens to access sensitive personally identifiable information (PII) of users, including names, addresses, IP addresses, and email addresses. The vulnerability has a CVSS score of 7.5, indicating a network-exploitable, low-complexity attack with high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.