CVE-2026-42692

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

CVE-2026-118083

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

CVE-2026-118083 WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

CVE-2026-118083

The WP Crowdfunding WordPress plugin (versions

EUVD-2026-113000

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

CVE-2026-118083 WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

CVE-2026-42692 WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

CVE-2026-42692

The WP Crowdfunding WordPress plugin (versions

CVE-2026-42692 WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

EUVD-2026-112946

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

PT-2026-132262

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

CVE-2026-42692: Themeum WP Crowdfunding: Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.

Unauthenticated Cross Site Scripting XSS in WP Crowdfunding = 2.2.2 versions...

PT-2026-132324

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

WordPress WP Crowdfunding cross-site scripting vulnerability

WordPress WP Crowdfunding versions 2.2.2 and earlier contain a cross-site scripting vulnerability. This vulnerability arises because unauthenticated users can be easily targeted by cross-site scripting attacks...

WordPress WP Crowdfunding information disclosure vulnerability

WordPress WP Crowdfunding versions 2.2.2 and earlier contain an information disclosure vulnerability. This vulnerability arises from the ability to access sensitive data without authentication, potentially leading to the leakage of such information...

CVE-2026-118083: Themeum WP Crowdfunding: Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.

Unauthenticated Sensitive Data Exposure in WP Crowdfunding = 2.2.2 versions...

WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Crowdfunding versions = 2.2.2...

WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin WP Crowdfunding versions = 2.2.2...

WordPress WP Crowdfunding plugin <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Crowdfunding versions = 2.2.1...

CVE-2026-19945

The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...