WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Whydonate versions = 4.0.15...

CVE-2023-29238 WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin = 3.12.15 versions...