3 results · Clear filters · Feed
-
Medium 6.5
WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.
-
Medium 6.5
WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FundEngine: from n/a through <= 1.7.6.
-
Medium 4.3
WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Roxnor FundEngine wp-fundraising-donation allows Cross Site Request Forgery.This issue affects FundEngine: from n/a through <= 1.7.3.