2 matches found
PT-2023-10300 ยท WordPress ยท Wp-Donate
Name of the Vulnerable Software and Affected Versions: wp-donate Plugin versions up to 1.4 Description: A critical issue has been found in the wp-donate Plugin, affecting an unknown part of the file includes/donate-display.php. This issue leads to sql injection and can be initiated remotely...
SUSE CVE-2018-1294
If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...