CVE-2026-78570

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.5 . An unauthenticated attacker can elevate their privileges to that of an administrator , resulting in a CVSS 3.1 base score of 9.8 (CRITICAL) with full impact on confidentialit...

EUVD-2026-65358

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator...

EUVD-2026-65324

The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

CVE-2026-78568

The Total Donations plugin for WordPress is vulnerable to unauthenticated SQL Injection in all versions up to and including 2.0.5 . The root cause is insufficient escaping on a user-supplied parameter combined with lack of sufficient preparation on the existing SQL query, allowing an attacker to ...

Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update

Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...

CVE-2026-73390

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

CVE-2026-73391

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

EUVD-2026-62392

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391

The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.

CVE-2026-73390 WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

EUVD-2026-62391

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

CVE-2026-73390

The Total Donations WordPress plugin (versions ≤ 2.0.5) has an unauthenticated privilege escalation vulnerability allowing network attackers to gain elevated access without credentials. CVSS 9.8 (Critical) reflects high confidentiality, integrity, and availability impact. No root cause, patch ver...

WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Total Donations versions = 2.0.5...

WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Total Donations versions = 2.0.5...

PT-2026-78347

Name of the Vulnerable Software and Affected Versions Total Donations versions prior to 2.0.6 Description An issue allows unauthenticated users to perform privilege escalation. Recommendations Update to a version newer than 2.0.5...

EUVD-2019-16261

Malware in sbrugna...

CVE-2025-43837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through = 3.0.8...

CVE-2025-43837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through = 3.0.8...

CVE-2025-43837

CVE-2025-43837 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Total Donations, reported for versions 3.0.8 and earlier. The issue stems from improper neutralization of input during web page generation, enabling a reflected XSS attack. Publicly documented impact in...