VendorsThemeumwp_crowdfundingany version
Vulnerabilities

Themeum WP Crowdfunding any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2023-41870
WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability
Published 2024-12-13 · Modified
8.8EPSS 0.008
CVE-2023-50859
WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-28 · Modified
6.5EPSS 0.003
CVE-2024-10117
WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode
Published 2024-10-26 · Analyzed
6.4EPSS 0.004
CVE-2024-43937
WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability
Published 2024-11-01 · Analyzed
6.4EPSS 0.004
CVE-2024-11910
WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-12-13 · Modified
6.4EPSS 0.003
CVE-2023-6161
WP Crowdfunding < 2.1.9 - Reflected XSS
Published 2024-01-08 · Modified
6.1EPSS 0.004
CVE-2023-47532
WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
Published 2023-11-14 · Modified
6.1EPSS 0.004
CVE-2025-1508
WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download
Published 2025-03-12 · Modified
5.3EPSS 0.004
CVE-2023-5757
WP Crowdfunding < 2.1.8 - Admin+ Stored XSS
Published 2023-12-11 · Modified
4.8EPSS 0.005
CVE-2023-6163
WP Crowdfunding < 2.1.10 - Admin+ Stored XSS
Published 2024-01-15 · Modified
4.8EPSS 0.004
CVE-2024-11911
WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation
Published 2024-12-13 · Analyzed
4.3EPSS 0.003