Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update

Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...

CVE-2019-6703

creationtimestamp| type| source ---|---|--- 2019-01-29 16:52:34+00:00| seen| MISP/5c508468-5250-4e74-9feb-2e260a021402 2025-10-07 05:00:30+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-6703.yaml 2025-10-08 21:02:23+00:00| seen|...

CVE-2019-6703

Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...

CVE-2019-6703

Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...

CVE-2019-6703

The Calmar Webmedia Total Donations plugin for WordPress (versions through 2.0.5 ) contains an incorrect access control vulnerability in migla_ajax_functions.php. Unauthenticated attackers can exploit this by sending requests to wp-admin/admin-ajax.php to trigger the miglaA_update_me action, allo...