| CVE-2026-118083 |
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-42692 |
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions
|
7.1
High
|
Oct 29, 2026 |
| CVE-2026-19945 |
The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter…
|
6.4
Medium
|
Sep 9, 2026 |
| CVE-2026-19944 |
The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all…
|
4.9
Medium
|
Sep 9, 2026 |
| CVE-2026-73189 |
Subscriber Insecure Direct Object References (IDOR) in WP Crowdfunding < 2.2.1 versions
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2025-31892 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP…
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-1508 |
The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability…
|
5.3
Medium
|
Mar 12, 2025 |
| CVE-2023-41870 |
Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control…
|
4.3
Medium
|
Dec 13, 2024 |
| CVE-2024-11911 |
The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability…
|
4.3
Medium
|
Dec 13, 2024 |
| CVE-2024-11910 |
The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wp-crowdfunding/search…
|
6.4
Medium
|
Dec 13, 2024 |
| CVE-2024-43937 |
Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control…
|
6.4
Medium
|
Nov 1, 2024 |
| CVE-2024-10117 |
The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcf_donate…
|
6.4
Medium
|
Oct 26, 2024 |
| CVE-2023-50859 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP…
|
6.5
Medium
|
Dec 28, 2023 |