Lucene search
+L

389 matches found

CNNVD
CNNVD
added 2026/04/08 12:00 a.m.23 views

WordPress plugin Cryptocurrency Donation Box – Bitcoin & Crypto Donations 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/07 8:16 a.m.10 views

CVE-2026-3177

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 1.8.9.7. This is due to missing cryptographic verification of incoming Stripe webhook...

5.3CVSS0.00166EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/07 7:40 a.m.8 views

CVE-2026-3177 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 1.8.9.7. This is due to missing cryptographic verification of incoming Stripe webhook...

5.3CVSS5.9AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.25 views

PT-2026-30800

Name of the Vulnerable Software and Affected Versions The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More versions through 1.8.9.7 Description The Charitable – Donation Plugin for WordPress is affected by a flaw due to missing cryptographic verification of...

5.3CVSS5.8AI score0.00166EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/03/06 7:54 a.m.11 views

CVE-2026-28115

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

9.3CVSS5.8AI score0.00241EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.11 views

EUVD-2026-9768

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

9.3CVSS6AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.19 views

CVE-2026-28115

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

9.3CVSS0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.42 views

CVE-2026-28115 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

9.3CVSS0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.7 views

CVE-2026-28115 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

9.3CVSS6AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.33 views

CVE-2026-28115

CVE-2026-28115 is described as an SQL Injection in the WordPress plugin WP Attractive Donations System – Easy Stripe & Paypal donations (WP_AttractiveDonationsSystem) affecting versions up to 1.25. The issue is labeled as an improper neutralization of special elements in SQL commands, enabling bl...

9.3CVSS6AI score0.00241EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.8 views

CVE-2026-28115

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

6AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.18 views

PT-2026-23388

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP AttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Payp...

6AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.15 views

WordPress plugin WP Attractive Donations System 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/02/16 6:43 p.m.19 views

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription' vulnerability

Missing Authorization in 'ptcancelsubscription' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...

5.4CVSS5.5AI score0.00317EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/02/16 6:42 p.m.16 views

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'update_profile_preference' vulnerability

Missing Authorization in 'updateprofilepreference' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...

5.4CVSS5.5AI score0.0028EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/02/03 9:27 a.m.14 views

WordPress Kudos Donations plugin <= 3.2.9 - Reflected Cross-Site Scripting via 'add_query_arg' vulnerability

Reflected Cross-Site Scripting via 'addqueryarg' vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Kudos Donations versions = 3.2.9...

6.1CVSS5.3AI score0.00346EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/10 5:41 a.m.13 views

CVE-2025-22715

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: fro...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/08 10:15 a.m.12 views

CVE-2025-22715

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: fro...

7.5CVSS0.00432EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/08 9:17 a.m.4 views

CVE-2025-22715 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: fro...

7.5CVSS6.6AI score0.00432EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/08 9:17 a.m.21 views

CVE-2025-22715

CVE-2025-22715 describes a Missing Authorization flaw in the WordPress plugin “WP Attractive Donations System – Easy Stripe & Paypal donations” (WP_AttractiveDonationsSystem). According to Wordfence, this vulnerability is an unauthenticated access issue that could lead to Arbitrary Content Deleti...

7.5CVSS6.6AI score0.00432EPSS
SaveExploits0References1
Rows per page
Query Builder