WordPress Plugin Vulnerabilities

Donation <= 1.0 - SQL Injection

Description

The WordPress Donation Plugin with Goals and Paypal IPN by NonprofitCMS.org WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg
No known fix

References

Exploitdb
17763

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
6f8944c3-2c65-4c20-9fe2-c6f15adb7491

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-04-27
Title
RSVPMaker < 9.2.7 - Unauthenticated SQLi
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_tracking_page FunctionMultiple Parameters SQL Injection
Published
2014-08-01
Title
WP-Cal 0.3 - editevent.php SQL Injection
Published
2026-01-27
Title
WPJobster <= 6.3.5 - Unauthenticated SQL Injection
Published
2021-10-26
Title
Ninja Forms < 3.6.4 - Admin+ SQL Injection