CVE-2026-14859

The WP Crowdfunding WordPress plugin (versions before 2.2.1 ) is vulnerable to an improper access control issue. The plugin fails to verify the campaign-submission capability within one of its AJAX actions . This allows authenticated users , such as those with Subscriber privileges, to create cro...