CPE
An unauthenticated PHP object injection vulnerability in the Give - Tributes plugin (<= 2.3.1) allows attackers to inject serialized objects during the donation process, potentially leading to RCE if chained with existing application gadgets.