smub

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-8791

  Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation

  The Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.8.1.14. This is due to the plugin not properly verifying a user's ident…

  smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More Web / CMS
  Sep 24, 2024
• Critical 9.8
  CVE-2023-4404

  Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation

  The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to …

  smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More Web / CMS
  Aug 23, 2023
• Critical 9.8
  CVE-2019-25141 Scanner template

  Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

  The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admin_init() function, in addition to insufficient input validation. This makes it possible fo…

  smub Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more Web / CMS
  Jun 7, 2023