WordPress Plugin Vulnerabilities

Total Donations - Update Arbitrary WordPress Option Values

Description

The Total Donations WordPress plugin was affected by an Update Arbitrary WordPress Option Values security vulnerability.

Affects Plugins

Plugin icon
total-donations
No known fix

References

CVE
CVE-2019-6703
URL
https://www.wordfence.com/blog/2019/01/wordpress-sites-compromised-via-zero-day-vulnerabilities-in-total-donations-plugin/
URL
https://www.zdnet.com/article/wordpress-sites-under-attack-via-zero-day-in-abandoned-plugin/

Miscellaneous

Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6e6342b0-82ca-4f5f-8b59-92ec3bdf1d02

Timeline

Publicly Published
2019-01-25 (about 6 years ago)
Added
2019-01-28 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-05-28
Title
Login with phone number < 1.7.27 - Authentication Bypass due to Missing Empty Value Check
Published
2024-04-12
Title
Download Manager < 3.2.83 - Unauthenticated Password Protected File Bypass
Published
2015-05-02
Title
Slideshow 2.2.8-2.2.21 - Option Value Disclosure
Published
2022-04-28
Title
Countdown & Clock <= 3.0.6 - Pro Features Lock Bypass
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS