Unknown Donation vulnerabilities

• rhewlif donation thermometer Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode CVE-2026-92409 6.8 MediumOctober 14, 2026
• unknown donation, kieranoshea donations +1 more Donation <= 1.0 - Admin+ SQLi CVE-2025-13001 4.1 MediumDecember 2, 2025
• harryhe gtpayment donations GTPayment Donations <= 1.0.0 - Stored XSS via CSRF CVE-2024-11607 6.1 MediumDecember 21, 2024
• bharatkambariya donation block for paypal, donation block for paypal project block for paypal +1 more Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS CVE-2024-6021 6.8 MediumJuly 30, 2024
• unknown paypal pay now, buy now, donation and cart buttons shortcode, mohsinrasool paypal pay now\, buy now\, donation and cart buttons shortcode, wordpress paypal buy now button +3 more +5 more PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS CVE-2024-5448 5.4 MediumJune 21, 2024
• unknown paypal pay now, buy now, donation and cart buttons shortcode, mohsin rasool paypal pay now buy now donation and cart buttons shortcode, mohsinrasool paypal pay now\, buy now\, donation and cart buttons shortcode +2 more PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS CVE-2024-5447 4.8 MediumJune 21, 2024
• mohsinrasool paypal pay now, buy now, donation and cart buttons shortcode PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3065 4.4 MediumMay 23, 2024
• bharatkambariya donation block for paypal, donation block for paypal project block for paypal +1 more Donation Block For PayPal < 2.1.0 - Contributor+ Stored XSS CVE-2023-0535 5.4 MediumFebruary 27, 2023
• david de boer paytium: mollie payment forms & donations, paytium +1 more Paytium < 4.3.7 - Admin+ Stored XSS CVE-2022-4042 4.8 MediumDecember 26, 2022
• donation button project button, unknown donation button +1 more Donation Button <= 4.0.0 - Subscriber+ Broken Access Control leading to SMS Spam CVE-2022-4004 4.3 MediumDecember 12, 2022
• donation button project button, unknown donation button +1 more Donation Button <= 4.0.0 - Contributor+ Stored XSS CVE-2022-4005 5.4 MediumDecember 12, 2022
• tipsandtricks-hq donations via paypal Donations via PayPal < 1.9.9 - Admin+ Stored XSS CVE-2022-3822 4.8 MediumNovember 28, 2022
• donation thermometer project thermometer, rhewlif donation thermometer +1 more Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting CVE-2022-3128 4.8 MediumOctober 3, 2022
• paymattic simple payment donations \& subscriptions, unknown simple payment donations & subscriptions plugin by paymattic – best payments plugin for wp +1 more Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting CVE-2022-2565 7.2 HighSeptember 5, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - DoS via CSRF CVE-2022-2260 6.5 MediumAugust 1, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting CVE-2022-2215 4.8 MediumAugust 1, 2022
• seamless donations project donations, unknown seamless donations: a platform for global fundraising and rebuilding using stripe and paypal +1 more Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF CVE-2022-1610 6.5 MediumJune 20, 2022
• unknown wp fundraising donation and crowdfunding platform, wpmet fundengine +1 more WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi CVE-2022-0788 9.8 CriticalJune 6, 2022
• donorbox, unknown donorbox – free recurring donation form +1 more Donorbox < 7.1.7 - Admin+ Stored Cross-Site Scripting CVE-2022-1396 4.8 MediumApril 25, 2022
• donations project donations Donations <= 1.8 - Unauthenticated SQLi CVE-2022-0782 9.8 CriticalApril 25, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool CVE-2022-0252 6.1 MediumFebruary 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard CVE-2021-25100 6.1 MediumFebruary 21, 2022
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting CVE-2021-25099 6.1 MediumFebruary 21, 2022
• scott paterson accept donations with paypal Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF CVE-2021-24989 6.5 MediumJanuary 24, 2022
• scott paterson accept donations with paypal Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting CVE-2021-24815 4.8 MediumNovember 17, 2021
• scott paterson accept donations with paypal Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion CVE-2021-24572 4.3 MediumNovember 1, 2021
• scott paterson accept donations with paypal Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting CVE-2021-24570 4.3 MediumNovember 1, 2021
• unknown paytm – donation plugin, freelancetoindia paytm-pay +1 more Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection CVE-2021-24554 7.2 HighAugust 23, 2021
• unknown charitable – donation plugin, wpcharitable charitable +1 more Charitable – Donation Plugin < 1.6.51 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24531 5.4 MediumAugust 23, 2021
• givewp, stellarwp givewp – donation plugin and fundraising platform +1 more GiveWP < 2.12.0 - Authenticated Stored XSS CVE-2021-24524 4.8 MediumAugust 23, 2021