Skip to contentThemeum Wp Crowdfunding vulnerabilities
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityCVE-2026-1180837.5 High
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-426927.1 High
- themeum wp crowdfundingWP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' ParameterCVE-2026-199456.4 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post MetaCVE-2026-199444.9 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-318926.5 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content DownloadCVE-2025-15085.3 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerabilityCVE-2023-418704.3 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce InstallationCVE-2024-119114.3 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-119106.4 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerabilityCVE-2024-439376.4 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate ShortcodeCVE-2024-101176.4 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508596.5 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475325.8 Medium