Skip to content
OpenAdvisories

Vendor

jjlemstra

2 known vulnerabilities.

Products

WhyDonate – FREE Donate button – Crowdfunding – Fundraising 1 Whydonate 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-49899

    WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.

    jjlemstra Whydonate
  • Medium 5.3
    CVE-2025-10186

    WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

    The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the remove_row function in all versions up to, and including, 4.0.15. This makes it possible f…

    jjlemstra WhyDonate – FREE Donate button – Crowdfunding – Fundraising Web / CMS