Lucene search

K
wpvulndbWpvulndbWPVDB-ID:067C3565-2FEA-47F4-AA34-2B3A95CE0D5F
HistoryMay 20, 2024 - 12:00 a.m.

WP Fundraising Donation and Crowdfunding Platform < 1.7.0 - Missing Authorization

2024-05-2000:00:00
wpscan.com
1
wordpress
vulnerable
data modification
unauthenticated attackers
donation platform

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Description The WP Fundraising Donation and Crowdfunding Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions surrounding donation modification in versions up to, and including, 1.6.4. This makes it possible for unauthenticated attackers to change payment types and donation statuses.

CPENameOperatorVersion
eq1.7.0

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for WPVDB-ID:067C3565-2FEA-47F4-AA34-2B3A95CE0D5F