Wp Crowdfunding (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-12. Vendor: Unknown.

CVEs of Wp Crowdfunding

• CVE-2026-14859 - CVSS 4.3 (medium), 2026-08-12: The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated…
• CVE-2026-14858 - CVSS 4.3 (medium), 2026-08-12: The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as…
• CVE-2026-14857 - CVSS 4.3 (medium), 2026-08-12: The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification…
• CVE-2023-6163 - CVSS 4.8 (medium), 2024-01-15: The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2023-6161 - CVSS 6.1 (medium), 2024-01-08: The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2023-5757 - CVSS 4.8 (medium), 2023-12-11: The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…