VendorsDonations Projectdonationsany version
Vulnerabilities

Donations Project Donations any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQLi
Published 2022-04-25 · Modified
9.8EPSS 0.017
CVE-2019-15772
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
Published 2019-08-29 · Modified
6.1EPSS 0.013
CVE-2022-29433
https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability
Published 2022-05-13 · Modified
5.4EPSS 0.006