CVE-2026-28115

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypa...

CVE-2025-58999

The CVE affects WordPress plugin WP Attractive Donations System - Easy Stripe & Paypal donations (versions up to 1.25). Root cause: lack of CSRF protection in the plugin, enabling Cross-Site Request Forgery. Impact per sources: unauthorized actions on behalf of authenticated users, as described b...