Wp Crowdfunding Security Vulnerabilities and Issues — Wp Crowdfunding CVE List

Lucene search

ThemeumWp Crowdfunding

3 matches found

CVE•added 2024/01/15 4:15 p.m.•45 views

CVE-2023-6163

The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS4.7AI score0.00081EPSS

CVE•added 2024/12/13 9:15 a.m.•36 views

CVE-2024-11911

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the install_woocommerce_plugin() function action in all versions up to, and including, 2.1.12. This makes it possible for authenticated attackers, with Subscriber-level ac...

4.3CVSS4.4AI score0.00045EPSS

CVE•added 2023/12/11 8:15 p.m.•32 views

CVE-2023-5757

The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS4.7AI score0.00093EPSS