121 matches found
WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin 4 author cheer up donate versions = 1.3...
WordPress Donate visa plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Donate visa versions = 1.0.0...
CVE-2024-53776
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53776 WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53776 WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Raphael Heide Donate Me allows Stored XSS.This issue affects Donate Me: from n/a through 1.2.5...
CVE-2024-53776
CVE-2024-53776 is a CSRF to Stored XSS vulnerability in the WordPress plugin Donate Me (versions <= 1.2.5). The issue arises from cross-site request forgery that can trigger stored XSS via Donate Me’s normal operations. Affected product: WordPress Donate Me plugin; affected versions:
WordPress plugin Donate Me 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...
PT-2024-35888 · Donate Me · Donate Me
Name of the Vulnerable Software and Affected Versions: Donate Me versions 1.2.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...
WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Donate Me versions = 1.2.5...
CVE-2024-10117
The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfdonate shortcode in all versions up to, and including, 2.1.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2024-16039 · WordPress · Wp Crowdfunding
Name of the Vulnerable Software and Affected Versions: WP Crowdfunding plugin for WordPress versions up to, and including, 2.1.11 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the wpcf donate shortcode. This allows...
CVE-2021-47584
CVE-2021-47584 : In Linux kernel iocost donation logic, a low hweight donor (active hweight=1) could trigger a divide-by-zero during donation calculation. The fix excludes cgroups with active hweight
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin = 3.12.15 versions...
CVE-2023-29238
CVE-2023-29238 is a CSRF vulnerability in the WordPress plugin Whydonate – FREE Donate button (wp-whydonate) affecting versions
Sql injection
A vulnerability was found in wp-donate Plugin up to 1.4 on WordPress. It has been classified as critical. This affects an unknown part of the file includes/donate-display.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.5 is able...
CVE-2015-10122
Summary of CVE-2015-10122 (wp-donate) : Multiple connected sources confirm a SQL injection in wp-donate Plugin versions up to 1.4, affecting an unknown part of includes/donate-display.php. The vulnerability can be exploited remotely and results in confidential/integrity/availability impact as des...
CVE-2015-10122 wp-donate Plugin donate-display.php sql injection
A vulnerability was found in wp-donate Plugin up to 1.4 on WordPress. It has been classified as critical. This affects an unknown part of the file includes/donate-display.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.5 is able...
WordPress Plugin wp-donate SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin wp-donate...
PT-2023-10300 · WordPress · Wp-Donate
Name of the Vulnerable Software and Affected Versions: wp-donate Plugin versions up to 1.4 Description: A critical issue has been found in the wp-donate Plugin, affecting an unknown part of the file includes/donate-display.php. This issue leads to sql injection and can be initiated remotely...
Malicious code in donate-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f34f2656f71a6dd83aad2842516d892b07f5fb714baa894f588ea85223dd8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...