CVE-2024-11685

Kudos Donations – Easy donations and Mollie plugin for WordPress is affected by a Reflected Cross‑Site Scripting vulnerability (CVE-2024-11685) due to insufficient escaping in add_query_arg, impacting all versions up to 3.2.9. Unauthenticated attackers could trigger a user action (e.g., link clic...