Skip to content
Sign in
6.4 Medium

CVE-2024-43937 Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control…

Description

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10.

Affected products and versions

Product Affected versions Fixed in
WP Crowdfunding 2.1 earliest → 2.1.10 No fix stated

Other CVEs of WP Crowdfunding

The 14 CVEs of WP Crowdfunding →
CVE-2026-118083 Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions 7.5 High CVE-2026-42692 Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions 7.1 High CVE-2026-19945 The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter… 6.4 Medium CVE-2026-19944 The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all… 4.9 Medium
Track this CVE