Lucene search
K

5 matches found

CVE
CVE
added 2025/10/15 8:25 a.m.9 views

CVE-2025-10186

CVE-2025-10186 affects the WordPress plugin “WhyDonate – FREE Donate button – Crowdfunding – Fundraising”. The vulnerability is an unauthorized data loss due to a missing capability check in the remove_row function, applicable to all versions up to and including 4.0.14. Unauthenticated attackers ...

5.3CVSS5.9AI score0.00109EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.2 views

CVE-2025-10186 WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.14 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.14. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5AI score0.00109EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/15 8:25 a.m.1 views

EUVD-2025-34562

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.14. This makes it possible for unauthenticated attackers to delete...

5.3CVSS4.9AI score0.00109EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.8 views

CVE-2025-10186 WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete...

5.3CVSS0.00109EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.1 views

WordPress plugin WhyDonate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00109EPSS
Exploits0References3
Rows per page
Query Builder