GiveWP · Version history
GiveWP changelog and version history
- Latest version
- 4.19.1.1
- Nov 3, 2026 (5 days ago)
- Releases
- 262
- since 2018
- In the last year
- 38
- about one every 9 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 201823 releases
- 201924 releases
- 202020 releases
- 202126 releases
- 202227 releases
- 202337 releases
- 202439 releases
- 202530 releases
- 202636 releases
202636 releases
GiveWP 4.19.1.1Latest
- Feature: Added support for Nexcess Plugin Stack licenses
- Security: Added additional validation to the donor default user role setting. (CVE-2026-118193)
- Security: Improved validation of donor email on donation forms.
GiveWP 4.19.1
- Fix: Updated the codebase to be fully compatible with the official WordPress Plugin Check guidelines.
- Fix: Added nonce and capability checks to dismiss, onboarding, import, export, usage tracking and database updater requests. A manual migration now requires a URL with a valid nonce (wp_nonce_url with the give_manual_migration action) or the Migration log page.
- Fix: Renamed unprefixed functions and hooks to give_-prefixed names. The old names still work and log a deprecation notice, except _give_is_form_migrated() and before_give_init, which add-ons still use.
- Fix: The donor search term is now escaped inside Give_Donors_Query, so callers must not escape it themselves.
- Fix: The uninstall script now deletes only the options that start with a GiveWP prefix. It used to delete every option with “give” in its name, including options of other plugins.
- Fix: Restored the Logout link in the Donor Dashboard mobile menu.
- Fix: Restored keyboard Tab access to Form Field Manager and other add-on fields on the amount step of multi-step forms that use the Sequoia template.
- Fix: Enabled the ‘Update Subscription’ button in the Donor Dashboard for failing subscriptions, so donors can replace an expired or declined card.
- Fix: Running a database update by hand with give-run-migration no longer ends in a fatal error.
- Fix: Reset Stats now clears only the deleted options from the object cache instead of flushing the whole cache.
- Fix: Prevented a fatal error on the Donor Register email preview when Give Peer-to-Peer is active.
- Fix: Changed the default ‘Donate’ button text color in the Donation Form Grid block to meet color contrast accessibility requirements (WCAG AAA).
GiveWP 4.19.0.2
- Security: Added additional validation to account registration on donation forms. Reported by Pablo Alaniz
- Security: Improved donation amount validation so donations always meet the amount set on the form.
GiveWP 4.19.0.1
- Security: Improved donation currency validation so the submitted currency must be supported by the form, including currencies enabled by the Currency Switcher. Reported by Shirshak.
- Security: Enhanced security for the donation form view. Reported by vuxvinh.
- Security: Improved validation of donor profile e-mail changes. Reported by Kaveesha Nirmal.
- Security: Improved validation of the core settings import. Reported by Karthik Ramakrishnan.
- Security: Added additional validation to donation form template appearance settings. Reported by Karthik Ramakrishnan.
- Security: Determine the page being edited from the current request context before granting page capabilities. Reported by Karthik Ramakrishnan.
- Security: Added additional validation to donor address management. Reported by Hariom Singh.
- Security: Improved anonymous donor filtering in the donor list. Reported by Vũ Quang Huy.
- Fix: Resolved an issue with Nexcess licensing not respecting the deactivated grace period
GiveWP 4.19.0
- Feature: Added the ability to create and edit donation forms without a campaign, and brought back the Forms list with a Campaign column, a “No campaign” filter, and a link-to-campaign action
- Feature: Added a campaign action on the Forms screen to assign a form to a campaign, move it to another one, or remove it from its campaign
- Feature: Added a Form column and a form filter to the Donations screen so you can see and filter donations by the form they came through
- Fix: Resolved an issue where the form picker on donation and subscription details showed an incomplete list of forms after a form was chosen
- Fix: Forms that are not linked to a campaign now load their own goal on the form page and in the forms list, and their donations show the form title in the donations list
- Fix: Resolved an issue where add-on licenses were not recognized correctly on sites using the Unified License Manager
- Fix: Resolved an issue where a donation moved to a different form still counted toward the old form in the Multi-Form Goal progress bar
- Fix: Changed PayPal order descriptions, the {donation} email tag and donation exports to name the donor’s selected level instead of the first level, including for donations without a stored level or with a recovered fee.
- Fix: Corrected donation and form queries leaving WordPress post globals populated after their results loop, which caused Multisite Network Admin site links to use a donation ID instead of the site ID.
- Fix: Resolved an issue where the classic Donations screen showed a broken campaign link for donations to forms without a campaign
- Tweak: Improved the unified licensing page experience.
- Tweak: Added a dismissible announcement banner to plugin admin pages.
GiveWP 4.18.0.1
- Security: Improved validation of PayPal Standard IPN notifications.
- Fix: Resolved an issue where PayPal Standard donations and subscription renewals with recovered fees were not recorded after the IPN validation update.
GiveWP 4.18.0
- Enhancement: Improved donations list table performance on sites with hundreds of thousands of donations by paging on IDs first, fixing the total count query, and replacing the single-column donation meta indexes with composite ones
- Enhancement: Improved the Reports screen and legacy earnings stats on large sites by summing and counting donations in the database instead of loading every donation into memory
- Enhancement: Improved donation processing speed by skipping unnecessary offline donation email checks
- Fix: Recurring donation stats on the campaigns list now read from the cache correctly instead of showing empty values
- Fix: Campaign stats now show for campaigns that were added after the stats cache was built
- Fix: Resolved an issue where campaign stats showed as zero after viewing the Campaigns screen with test mode enabled
- Fix: Donations list table was running extremely slowly and including trashed donations on large sites.
- Fix: Resolved an issue where a database error while saving a donation, donor, subscription, campaign, or event caused a critical error and hid the real cause
- Fix: Resolved an issue where sites running PHP 8.4 or newer logged deprecation notices from GiveWP
- Fix: Database migrations started a second time in requests that arrive while a slow migration is still running. Now it runs one time and the migrations list now shows the latest run first.
- Fix: Resolved an issue where a PHP warning could appear on development copies of GiveWP that have not been built
- Fix: Resolved an issue where subscription webhook events caused a fatal error when the subscription had no initial donation
- Fix: Updated campaign duplication to create a single copy of each associated form when form metadata contains duplicate keys.
- Fix: Restored donor names, initials, and totals on the donor wall block and shortcode.
- Security: Enhanced security in Stripe webhook module
- Security: Enhanced security on the campaign block. (CVE-2026-97643)
- Security: Enhanced security for the Donor Dashboard access.
GiveWP 4.17.0
- Feature: Added the ability to embed donation forms on any website with a copy-paste snippet from the form builder
- Enhancement: Donation form embeds now show a loading state while the form loads
- Fix: Fixed PHP 8.4 deprecation notices about implicitly nullable parameters
- Fix: Fixed the revenue table index migration adding duplicate indexes when it runs more than once
- Fix: Added additional escaping to the legacy donation form’s billing address fields.
- Security: Donors can no longer add unverified email addresses to their own donor record.
- Security: Enhanced security for donations imported from CSV
GiveWP 4.16.9
- Security: Added additional validation to PayPal Commerce donation processing.
- Security: Added additional sanitization to donor information displayed on public pages.
- Fix: Resolved an issue where resuming a paused Stripe subscription triggered a fatal error.
GiveWP 4.16.8.1
- Security: Improved validation of the event tickets purchase flow.
- Security: Added additional validation to PayPal Commerce completed-order processing.
- Security: Added additional validation to donor email lookups. Thanks Jakub Herman for responsibly disclosing this issue.
GiveWP 4.16.8
- Fix: Fixed a campaign’s default donation form appearing unpublished in the form builder.
- Fix: Fixed PHP warnings on the form builder screen when its page is opened without the locale or donation form ID query arguments.
- Fix: Resolved a plugin conflict that prevented donor first and last names from being recorded when the Charitable plugin was active alongside GiveWP.
- Fix: Resolved an issue where the custom amount minimum and maximum also applied to the donation levels and the set donation amount, so a level below the minimum could not be donated. Forms that leave the minimum empty now fall back to the lowest configured amount, and a minimum or maximum with cent…
- Security: Removed vulnerable dead code related to legacy donor relinking. (CVE-2026-82676)
- Security: Enhanced security on donor account access. (CVE-2026-82675)
- Tweak: Replaced the axios HTTP client with WordPress core’s apiFetch in the donor dashboard, reports, onboarding wizard, and the log and migration list tables, and removed axios from the plugin’s JavaScript dependencies.
GiveWP 4.16.7.2
- Security: Added additional hardening for serialized data handling in the donation flow.
GiveWP 4.16.7.1
- Security: Added additional validation to PayPal Donations order requests.
GiveWP 4.16.7
- Security: Hardened donor-account email access authentication.
- Security: Improved validation of the checkout login form.
- Fix: Resolved an issue where paused or failing Stripe Payment Element subscriptions remained stuck when the donor updated their payment method or the subscription was resumed in Stripe.
- Fix: Resolved a conflict where scripts enqueued by other plugins while a donation form was being rendered could stop the form builder design preview and embedded forms from loading.
- Fix: Resolved an issue where editing a page could exhaust the PHP call stack when a theme or plugin filtered post metadata.
- Fix: Activation banner for addons doesn’t show when addons are activated from the Unified License Manager
GiveWP 4.16.6.1
- Security: Added additional validation to PayPal Standard IPN.
GiveWP 4.16.6
- Tweak: Improved the unified licensing page experience.
- Security: Added additional validation when handling serialized data during the donation process.
- Security: Added additional escaping and validation to legacy donor admin screens and the donors REST API.
- Security: Strengthened validation of the donor email-access token and the donation receipt email preview.
- Security: Added a capability check to the onboarding form preview screen to prevent unauthorized access.
- Security: Added nonce verification to the front-end registration handler and restricted automatic donor account linking to the verified donation checkout flow.
- Fix: Added validation to prevent empty password updates in the Donor Dashboard.
- Fix: Resolved an issue where uploading a ZIP add-on with a folder name that differs from the ZIP filename (e.g. give-recurring-donations-2.19.0.zip containing the folder give-recurring/) would fail to detect the plugin after extraction.
GiveWP 4.16.5.1
- Security: Strengthened security on legacy donors listing and donation details pages.
GiveWP 4.16.5
- Fix: Resolved an issue where selecting a donation amount level would also select other levels with the same value.
- Fix: Resolved an issue where extra separators could render in the donation confirmation page header when line breaks were present in the header text.
- Fix: Resolved an issue where refunding a donation made with a per-form Stripe account would fail because the refund request used the default account instead of the form-specific account.
GiveWP 4.16.4
- Security: Added additional validation to the core settings importer.
- Security: Added additional escaping to donor information displayed in the admin.
- Security: Added additional escaping to the Sequoia (Multi-Step Form) template output. (CVE-2026-14987)
GiveWP 4.16.3
- Security: Added additional validation to ensure donation gateway selection respects the enabled payment gateway settings.
- Security: Improved escaping of donation form template output.
- Security: Improved the security of the recurring donation REST API.
GiveWP 4.16.2
- Security: Added additional escaping and sanitization to the Sequoia (Multi-Step Form) template settings and donation form markup (CVE-2026-13704).
GiveWP 4.16.1
- Security: Standardized email access confirmation AJAX responses to prevent distinguishable server responses.
- Security: Added additional escaping and sanitization to the Campaign Comments block and shortcode attributes (CVE-2026-13246).
GiveWP 4.16.0
- Feature: Added an optional donation ID parameter to gateway webhook event handlers, allowing gateways to locate donations when the transaction ID is only available in the webhook payload.
- Fix: Resolved an issue where multi-step donation forms could be incorrectly rejected as spam because Akismet was checked on every form step; the spam check now runs once on final submission.
GiveWP 4.15.5
- Security: Improved the security of the Donor Dashboard login process.
GiveWP 4.15.4
- Security: Added additional protection to the email notification settings.
GiveWP 4.15.3
GiveWP 4.15.2
GiveWP 4.15.1
GiveWP 4.15.0
GiveWP 4.14.6
GiveWP 4.14.5
GiveWP 4.14.4
GiveWP 4.14.3
GiveWP 4.14.2
GiveWP 4.14.1
GiveWP 4.14.0
202530 releases
GiveWP 4.13.2
GiveWP 4.13.1
GiveWP 4.13.0
GiveWP 4.12.0
GiveWP 4.11.0
GiveWP 4.10.1
GiveWP 4.10.0
GiveWP 4.9.0
GiveWP 4.8.1
GiveWP 4.8.0
GiveWP 4.7.1
GiveWP 4.7.0
GiveWP 4.6.1
GiveWP 4.5.0
GiveWP 4.4.0
GiveWP 4.3.2
GiveWP 4.3.1
GiveWP 4.3.0
GiveWP 4.2.1
GiveWP 4.2.0
GiveWP 4.1.1
GiveWP 4.1.0
GiveWP 4.0.0
GiveWP 3.22.2
GiveWP 3.22.1
GiveWP 3.22.0
GiveWP 3.21.1
GiveWP 3.21.0
GiveWP 3.20.0
GiveWP 3.19.4
202439 releases
GiveWP 3.19.3
GiveWP 3.19.2
GiveWP 3.19.1
GiveWP 3.19.0
GiveWP 3.18.0
GiveWP 3.17.2
GiveWP 3.17.1
GiveWP 3.17.0
GiveWP 3.16.5
GiveWP 3.16.4
GiveWP 3.16.3
GiveWP 3.16.2
GiveWP 3.16.1
GiveWP 3.16.0
GiveWP 3.15.1
GiveWP 3.15.0
GiveWP 3.14.2
GiveWP 3.14.1
GiveWP 3.14.0
GiveWP 3.13.0
GiveWP 3.12.3
GiveWP 3.12.2
GiveWP 3.12.1
GiveWP 3.12.0
GiveWP 3.11.0
GiveWP 3.10.0
GiveWP 3.9.0
GiveWP 3.8.0
GiveWP 3.7.0
GiveWP 3.6.2
GiveWP 3.6.1
GiveWP 3.6.0
GiveWP 3.5.1
GiveWP 3.5.0
GiveWP 3.4.2
GiveWP 3.4.1
GiveWP 3.4.0
GiveWP 3.3.1
GiveWP 3.3.0
202337 releases
GiveWP 3.2.2
GiveWP 3.2.1
GiveWP 3.2.0
GiveWP 3.1.2
GiveWP 3.1.1
GiveWP 3.1.0
GiveWP 3.0.4
GiveWP 3.0.3
GiveWP 3.0.2
GiveWP 3.0.1
GiveWP 3.0.0
GiveWP 2.33.5
GiveWP 2.33.4
GiveWP 2.33.3
GiveWP 2.33.2
GiveWP 2.33.1
GiveWP 2.33.0
GiveWP 2.32.0
GiveWP 2.31.1
GiveWP 2.31.0
GiveWP 2.30.0
GiveWP 2.29.2
GiveWP 2.29.1
GiveWP 2.29.0
GiveWP 2.28.0
GiveWP 2.27.3
GiveWP 2.27.2
GiveWP 2.27.1
GiveWP 2.27.0
GiveWP 2.26.0
GiveWP 2.25.3
GiveWP 2.25.2
GiveWP 2.25.1
GiveWP 2.25.0
GiveWP 2.24.2
GiveWP 2.24.1
GiveWP 2.24.0
202227 releases
GiveWP 2.23.2
GiveWP 2.23.1
GiveWP 2.23.0
GiveWP 2.22.3
GiveWP 2.22.2
GiveWP 2.22.1
GiveWP 2.22.0
GiveWP 2.21.4
GiveWP 2.21.3
GiveWP 2.21.2
GiveWP 2.21.1
GiveWP 2.21.0
GiveWP 2.20.2
GiveWP 2.20.1
GiveWP 2.20.0
GiveWP 2.19.8
GiveWP 2.19.7
GiveWP 2.19.6
GiveWP 2.19.5
GiveWP 2.19.4
GiveWP 2.19.3
GiveWP 2.19.2
GiveWP 2.19.1
GiveWP 1.9.0
GiveWP 2.18.1
GiveWP 2.18.0
GiveWP 2.17.3
202126 releases
GiveWP 2.17.1
GiveWP 2.17.0
GiveWP 2.16.1
GiveWP 2.16.0
GiveWP 2.15.0
GiveWP 2.14.0
GiveWP 2.13.4
GiveWP 2.13.3
GiveWP 2.13.2
GiveWP 2.13.1
GiveWP 2.13.0
GiveWP 2.12.3
GiveWP 2.12.2
GiveWP 2.12.1
GiveWP 2.12.0
GiveWP 2.11.3
GiveWP 2.11.2
GiveWP 2.11.1
GiveWP 2.11.0
GiveWP 2.10.4
GiveWP 2.10.3
GiveWP 2.10.2
GiveWP 2.10.1
GiveWP 2.10.0
GiveWP 2.9.7
GiveWP 2.9.6
202020 releases
GiveWP 2.9.5
GiveWP 2.9.4
GiveWP 2.9.3
GiveWP 2.9.2
GiveWP 2.9.1
GiveWP 2.9.0
GiveWP 2.8.1
GiveWP 2.8.0
GiveWP 2.7.5
GiveWP 2.7.4
GiveWP 2.7.3
GiveWP 2.7.2
GiveWP 2.7.1
GiveWP 2.7.0
GiveWP 2.6.3
GiveWP 2.6.2
GiveWP 2.6.1
GiveWP 2.6.0
GiveWP 2.5.13
GiveWP 2.5.12
201924 releases
GiveWP 2.5.11
GiveWP 2.5.10
GiveWP 2.5.9
GiveWP 2.5.8
GiveWP 2.5.7
GiveWP 2.5.6
GiveWP 2.5.5
GiveWP 2.5.4
GiveWP 2.5.3
GiveWP 2.5.2
GiveWP 2.5.1
GiveWP 2.5.0
GiveWP 2.3.2
GiveWP 2.2.6
GiveWP 2.1.8
GiveWP 2.0.7
GiveWP 2.4.7
GiveWP 2.4.6
GiveWP 2.4.5
GiveWP 2.4.4
GiveWP 2.4.3
GiveWP 2.4.2
GiveWP 2.4.1
GiveWP 2.4.0
201823 releases
GiveWP 2.3.1
GiveWP 2.3.0
GiveWP 2.2.5
GiveWP 2.2.4
GiveWP 2.2.3
GiveWP 2.2.2
GiveWP 2.2.1
GiveWP 2.2.0
GiveWP 2.1.7
GiveWP 2.1.6
GiveWP 2.1.5
GiveWP 2.1.4
GiveWP 2.1.3
GiveWP 2.1.2
GiveWP 2.1.1
GiveWP 2.1.0
GiveWP 2.0.6
GiveWP 2.0.5
GiveWP 2.0.4
GiveWP 2.0.3
GiveWP 2.0.2
GiveWP 2.0.1
GiveWP 2.0.0
Questions about GiveWP’s releases
What is the latest version of GiveWP?
4.19.1.1, released on Nov 3, 2026 (5 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is GiveWP updated?
38 releases in the last year, about one every 9 days. Its first release on WordPress.org dates from January 2018.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in GiveWP’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.