CVE-2026-75930: Missing Authorization

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2026-76063: Improper Neutralization of Input During Web Page Generation

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfpfeaturedvideourl' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2024-35028

Malicious code in bioql PyPI...

CVE-2024-34758

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

WordPress plugin WP Fundraising Donation and Crowdfunding Platform 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress IgnitionDeck Crowdfunding Platform plugin <= 1.9.8 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Marco Wotschka in WordPress Plugin IgnitionDeck versions = 1.9.8...

CVE-2024-4410 IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization

The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. This is due to missing capability checks on various functions called via AJAX actions in the /classes/class-idf-wizard.php file. This makes it possible for...

CVE-2024-4410 IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization

The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. This is due to missing capability checks on various functions called via AJAX actions in the /classes/class-idf-wizard.php file. This makes it possible for...

CVE-2024-4410

CVE-2024-4410 — IgnitionDeck Crowdfunding Platform (WordPress) Affected: IgnitionDeck Crowdfunding Platform plugin for WordPress (

CVE-2024-4410: Missing Authorization

The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. This is due to missing capability checks on various functions called via AJAX actions in the /classes/class-idf-wizard.php file. This makes it possible for...

WordPress plugin IgnitionDeck Crowdfunding Platform 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-34758

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

CVE-2024-34758 WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

CVE-2024-34758

CVE-2024-34758 is a Missing Authorization (broken access control) vulnerability in the WP Fundraising Donation and Crowdfunding Platform (FundEngine) plugin for WordPress, affecting versions up to 1.6.4. Multiple sources confirm the issue and track it under CVE-2024-34758; Red Hat and NVD descrip...

CVE-2024-34758: Missing Authorization

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

PT-2024-26165

Name of the Vulnerable Software and Affected Versions Wpmet WP Fundraising Donation and Crowdfunding Platform versions 1.6.4 and earlier Description A Missing Authorization issue has been identified. This issue affects the Wpmet WP Fundraising Donation and Crowdfunding Platform, allowing potentia...

WordPress WP Fundraising Donation and Crowdfunding Platform Plugin <= 1.6.4 is vulnerable to Broken Access Control

Software WP Fundraising Donation and Crowdfunding Platform Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.7.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34758 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 115891fc59b1...

WordPress plugin WP Fundraising Donation and Crowdfunding Platform SQL注入漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. crow and others are open source products. crow is a C micro framework for running Web services. WordPress WP...

CVE-2022-0788: Improper Neutralization of Special Elements used in an SQL Command

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users...