PT-2026-36589

The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in versions up to and including 2.0.8. This is due to missing authorization and nonce verification in the donate action status AJAX handler, which is registered to be accessible to unauthenticated users...