Skip to content
OpenAdvisories

Vendor

ethoseo

2 known vulnerabilities.

Products

Simple Donate 1 Track Everything 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2025-11882

    Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This ma…

    ethoseo Simple Donate Web / CMS