Skip to content
OpenAdvisories

Vendor

kanwei_doublethedonation

3 known vulnerabilities.

Products

Double the Donation 2 Double the Donation – A workplace giving tool 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-12020

    Double the Donation <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.0 due to insufficient input sanitization and outp…

    kanwei_doublethedonation Double the Donation – A workplace giving tool Web / CMS
  • Medium 5.9
    CVE-2025-57929

    WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kanwei_doublethedonation Double the Donation double-the-donation allows Stored XSS.This issue affects Double the Donation: from n/a through <= 2.0.0.

    kanwei_doublethedonation Double the Donation
  • Medium 4.3
    CVE-2025-57930

    WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in kanwei_doublethedonation Double the Donation double-the-donation allows Cross Site Request Forgery.This issue affects Double the Donation: from n/a through <= 2.0.0.

    kanwei_doublethedonation Double the Donation