Export limit exceeded: 11763 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-29433

https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability

Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Donations Project
Products
Donations
CVE-2022-0782

Donations <= 1.8 - Unauthenticated SQLi

The Donations WordPress plugin through 1.8 does not sanitise and escape the nd_donations_id parameter before using it in a SQL statement via the nd_donations_single_cause_form_validate_fields_php_function AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Donations Project
Products
Donations
CVE-2019-15772

The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

CVSS 3.0 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Donations Project
Products
Donations