Known vulnerabilities in Unknown IDonate
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-11154 | The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action… | 5.4 Medium | Oct 27, 2025 |
| CVE-2024-3594 | The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high… | 8.7 High | May 23, 2024 |