WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
donate-button
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
donate-extra
Published
2022-04-26
Title
Donate Extra <= 2.02 - Reflected Cross-Site Scripting
Slug
donate-me
Published
2024-11-28
Title
Donate Me <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
donate-me
Published
2025-04-01
Title
Donate Me <= 1.2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
donate-visa
Published
2025-01-16
Title
Donate visa <= 1.0.0 - Missing Authorization
Slug
donate-with-qrcode
Published
2021-08-19
Title
Donate With QRCode <= 1.4.5 - Plugin's Setting Update via CSRF
Slug
donate-with-qrcode
Published
2021-08-19
Title
Donate With QRCode < 1.4.5 - Stored Cross-Site Scripting
Slug
donation
Published
2025-11-11
Title
Donation <= 1.0 - Admin+ SQLi
Slug
donation-button
Published
2022-11-16
Title
Donation Button <= 4.0.0 - Subscriber+ Broken Access Control leading to SMS Spam
Slug
donation-button
Published
2022-11-16
Title
Donation Button <= 4.0.0 - Contributor+ Stored XSS
Slug
donation-forms-by-givecloud
Published
2025-09-05
Title
Donation Forms WP by Givecloud < 1.0.10 - Contributor+ Stored XSS
Slug
donation-thermometer
Published
2022-09-07
Title
Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting
Slug
donation-thermometer
Published
2025-11-26
Title
Donation Thermometer < 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donations-block
Published
2023-02-01
Title
Donation Block For PayPal < 2.1.0 - Contributor+ Stored XSS
Slug
donations-block
Published
2024-07-09
Title
Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS
Slug
donations-block
Published
2025-01-07
Title
Donation Block For PayPal <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donations-for-woocommerce
Published
2023-06-21
Title
Potent Donations for WooCommerce < 1.1.10 - Cross-Site Request Forgery
Slug
doneren-met-mollie
Published
2021-01-22
Title
Doneren met Mollie < 2.8.5 - Unauthorised CSV Export leading to Sensitive Data Disclosure
Slug
doneren-met-mollie
Published
2024-03-25
Title
Doneren met Mollie < 2.10.3 - Unauthenticated Reflected Cross-Site Scripting via search
Slug
doneren-met-mollie
Published
2025-03-27
Title
Doneren met Mollie < 2.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donorbox-donation-form
Published
2019-12-31
Title
Donorbox 7.1~7.1.1 - Stored Cross-Site Scripting via Shortcode
Slug
donorbox-donation-form
Published
2022-03-30
Title
Donorbox < 7.1.7 - Admin+ Stored Cross-Site Scripting
Slug
dont-break-the-code
Published
2024-11-04
Title
Don't Break The Code <= .3.1 - Reflected Cross-Site Scripting
Slug
dont-muck-my-markup
Published
2024-01-30
Title
Don't Muck My Markup <= 1.8 - Cross-Site Request Forgery
Slug
doofinder
Published
2024-11-04
Title
Doofinder <= 0.5.4 - Reflected Cross-Site Scripting