865 matches found
GiveWP - PHP Object Injection
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...
GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...
Privacy Tools List by CKTN
Please consider to donate to the actual developers, I do not take any money from you nor is this project designed to make any donations out from other peoples projects. It is more helpful to all of us if the mentioned developers receiving funding to push their projects...
WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection
WordPress Paytm Donation plugin through 1.3.2 is susceptible to authenticated SQL injection. The plugin does not sanitize, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations. An attacker can possibly obtain sensitive information, modify data, and/o...
WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection
WordPress WP Fundraising Donation and Crowdfunding Platform plugin before 1.5.0 contains an unauthenticated SQL injection vulnerability. It does not sanitize and escape a parameter before using it in a SQL statement via a REST route. An attacker can possibly obtain sensitive information, modify...
CVE-Chamilo-LMS
CVE Chamilo LMS Collection of CVE Chamilo LMS Donate...
CVE-2025-34158-CVE-2020-5741
cve-id Donate...
CVE-2026-19516
CVE-2026-19516 Donate...
CVE-2026-20212
cve-id Donate...
CVE-2025-8518
cve-id Donate...
CVE-2026-8467
cve-id Donate...
CVE-2026-9586
cve-id Donate...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iocost: Fixed the issue of dividing by zero when donating from cgroups with an active hweight of less than 2. The donation calculation logic assumes that the donor’s hweight remains non-zero after the donation. Therefore, the...
CVE-2026-16650
The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as paid without any real payment...
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-53899
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...
EUVD-2026-42658
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature...
CVE-2026-14318
The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...
CVE-2026-14318 GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...