Skip to content
OpenAdvisories

Vendor

ignitionwp

2 known vulnerabilities.

Products

IgnitionDeck 1 IgnitionDeck Crowdfunding Platform 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-62918

    WordPress IgnitionDeck plugin <= 2.0.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IgnitionDeck: from n/a through <= 2.0.15.

    ignitionwp IgnitionDeck
  • Medium 5.4
    CVE-2024-4410

    IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization

    The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. This is due to missing capability checks on various functions called via AJAX actions in the ~/classes/class-idf-wizard…

    ignitionwp IgnitionDeck Crowdfunding Platform Web / CMS