Skip to content
OpenAdvisories
High · 7.1 CVE-2025-43837 EUVD-2025-15804GHSA-h5cq-h88x-4gq5

WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability

Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through <= 3.0.8.

Affected products

VendorProductAffectedFixed
binti76 Total Donations ≤ 3.0.8 —

References