Alertes, guides et veille WordPress.

Filtre par plugin

donations

Effacer

Cryptocurrency Donation Box – Bitcoin & Crypto Donations

MoyenneCVSS 5.3

CVE-2026-39691

Défaut de contrôle d'accès dans Cryptocurrency Donation Box – Bitcoin & Crypto Donations (<= 2.2.13)

Plugin: Cryptocurrency Donation Box – Bitcoin & Crypto Donations
Versions: <= 2.2.13
CVSS: 5.3/10
Correctif: Aucun

23 févr. 2026

Lire

MoyenneCVSS 5.3

CVE-2025-22715

Défaut de contrôle d'accès, non authentifié, dans WP Attractive Donations System - Easy Stripe & Paypal donations (<= 1.25)

Plugin: WP Attractive Donations System - Easy Stripe & Paypal donations
Versions: <= 1.25
CVSS: 5.3/10
Correctif: Aucun

8 janv. 2026

Lire

MoyenneCVSS 4.7

CVE-2025-68602

Redirection ouverte, non authentifié, dans Accept Donations with PayPal & Stripe (<= 1.5.2)

Plugin: Accept Donations with PayPal & Stripe
Versions: <= 1.5.2
CVSS: 4.7/10
Correctif: 1.5.3

25 déc. 2025

Lire

Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions

ÉlevéeCVSS 7.5

CVE-2025-9322

Injection SQL, non authentifié, dans Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (<= 8.3.1)

Plugin: Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
Versions: <= 8.3.1
CVSS: 7.5/10
Correctif: 8.3.2

24 oct. 2025

Lire

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More

MoyenneCVSS 6.5

CVE-2025-11893

Injection SQL, authentifié (Abonné+), dans Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More (<= 1.8.8.4)

Plugin: Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
Versions: <= 1.8.8.4
CVSS: 6.5/10
Correctif: 1.8.8.5

24 oct. 2025

Lire

MoyenneCVSS 4.3

CVE-2025-58999

CSRF (Cross-Site Request Forgery) dans WP Attractive Donations System - Easy Stripe & Paypal donations (<= 1.25)

Plugin: WP Attractive Donations System - Easy Stripe & Paypal donations
Versions: <= 1.25
CVSS: 4.3/10
Correctif: Aucun

2 oct. 2025

Lire

MoyenneCVSS 4.3

CVE-2025-58956

CSRF (Cross-Site Request Forgery) dans WP Attractive Donations System (<= 1.29)

Plugin: WP Attractive Donations System
Versions: <= 1.29
CVSS: 4.3/10
Correctif: 1.29

22 sept. 2025

Lire

Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions

MoyenneCVSS 4.9

CVE-2025-58789

Injection SQL, authentifié (Administrateur+), dans Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (<= 8.2.5)

Plugin: Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
Versions: <= 8.2.5
CVSS: 4.9/10
Correctif: 8.2.6

5 sept. 2025

Lire

MoyenneCVSS 4.4

CVE-2025-57891

XSS stocké, authentifié (Administrateur+), dans Recurring PayPal Donations (<= 1.8)

Plugin: Recurring PayPal Donations
Versions: <= 1.8
CVSS: 4.4/10
Correctif: 1.9

22 août 2025

Lire

Easy Stripe – Tips, Payments, and Donations

CritiqueCVSS 9.8

CVE-2025-49302

Exécution de code à distance (RCE), non authentifié, dans Easy Stripe – Tips, Payments, and Donations (<= 1.1)

Plugin: Easy Stripe – Tips, Payments, and Donations
Versions: <= 1.1
CVSS: 9.8/10
Correctif: 1.2

3 juil. 2025

Lire

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More

MoyenneCVSS 4.4

CVE-2025-5275

XSS stocké, authentifié (Administrateur+), dans Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More (<= 1.8.6.1)

Plugin: Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
Versions: <= 1.8.6.1
CVSS: 4.4/10
Correctif: 1.8.6.2

25 juin 2025

Lire

WPSmartPay – Payment Forms, Invoices, Donations & Subscriptions

ÉlevéeCVSS 8.8

CVE-2025-25171

Prise de contrôle de compte, authentifié (Abonné+), dans WPSmartPay – Payment Forms, Invoices, Donations & Subscriptions (<= 2.7.13)

Plugin: WPSmartPay – Payment Forms, Invoices, Donations & Subscriptions
Versions: <= 2.7.13
CVSS: 8.8/10
Correctif: 2.8.0