WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection

WordPress Paytm Donation plugin through 1.3.2 is susceptible to authenticated SQL injection. The plugin does not sanitize, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations. An attacker can possibly obtain sensitive information, modify data, and/o...

GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...

WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection

WordPress WP Fundraising Donation and Crowdfunding Platform plugin before 1.5.0 contains an unauthenticated SQL injection vulnerability. It does not sanitize and escape a parameter before using it in a SQL statement via a REST route. An attacker can possibly obtain sensitive information, modify...

Privacy Tools List by CKTN

실제 개발자들에게 기부해 주시기 바랍니다. 저는 여러분으로부터 어떤 돈도 받지 않으며, 이 프로젝트는 다른 사람들의 프로젝트에서 기부금을 빼내도록 설계되지 않았습니다. 언급된 개발자들이 자금을 지원받아 자신의 프로젝트를 추진할 수 있다면 우리 모두에게 더 도움이 됩니다...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

CVE-Chamilo-LMS

CVE Chamilo LMS CVE Chamilo LMS のコレクション 寄付...

CVE-2025-34158-CVE-2020-5741

cve-id 寄付...

CVE-2026-19516

CVE-2026-19516 寄付...

CVE-2026-73554

cve-id 寄付...

CVE-2026-20212

cve-id 寄付...

CVE-2025-8518

cve-id 寄付...

CVE-2026-8467

cve-id 寄付...

CVE-2026-9586

cve-id 寄付...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iocost: Fixed the issue of dividing by zero when donating from cgroups with an active hweight of less than 2. The donation calculation logic assumes that the donor’s hweight remains non-zero after the donation. Therefore, the...

CVE-2026-16650

The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as paid without any real payment...

CVE-2026-73348

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

EUVD-2026-53899

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...

EUVD-2026-42658

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature...

CVE-2026-14318

The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...

CVE-2026-14318 GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings

The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...