Aller au contenu
Se connecter
5.4 Moyenne

CVE-2025-11154 The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action…

Description

The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthenticated attackers to delete arbitrary users.

Produits et versions touchés

Produit Versions touchées Corrigé en
IDonate 2.1 premières → < 2.1.13 2.1.13

Autres CVE de IDonate

Les 2 CVE de IDonate →
CVE-2024-3594 The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high… 8.7 Élevée
Suivre cette CVE