Description
Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nicdark | Donations (WordPress plugin) | <= 1.8 – ≤ 1.8 | — |
Medium · 4.1
CVE-2022-29433
EUVD-2022-33771GHSA-mfhc-cxf3-6gxr
https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability
Published May 13, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack