4.3
Medium
CVE-2023-41870 Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Crowdfunding 2.1 | earliest → 2.1.5 | No fix stated |
Other CVEs of WP Crowdfunding
The 14 CVEs of WP Crowdfunding →
CVE-2026-118083
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions
7.5
High
CVE-2026-42692
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions
7.1
High
CVE-2026-19945
The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter…
6.4
Medium
CVE-2026-19944
The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all…
4.9
Medium