Lucene search
+L

6 matches found

CVE
CVE
•added 2025/10/15 8:25 a.m.•39 views

CVE-2025-10186

CVE-2025-10186 affects the WordPress plugin “WhyDonate – FREE Donate button – Crowdfunding – Fundraising”. The vulnerability is an unauthorized data loss due to a missing capability check in the remove_row function, applicable to all versions up to and including 4.0.14. Unauthenticated attackers ...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/15 8:25 a.m.•17 views

EUVD-2025-34562

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.14. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/15 8:25 a.m.•13 views

CVE-2025-10186 WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.14 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.14. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/15 8:25 a.m.•37 views

CVE-2025-10186 WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete...

5.3CVSS0.00364EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•4 views

CVE-2025-10186: Missing Authorization

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•15 views

WordPress plugin WhyDonate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References3
Rows per page
Query Builder