Vulnerabilities (CVE)

Filtered by vendor Donations Project Subscribe
Filtered by product Donations
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29433 1 Donations Project 1 Donations 2022-05-23 3.5 LOW 5.4 MEDIUM
Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.
CVE-2019-15772 1 Donations Project 1 Donations 2019-09-04 5.8 MEDIUM 6.1 MEDIUM
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.