Description
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rhewlif | Donation Thermometer | ≤ 2.2.7 | — |
Medium · 5.3
CVE-2025-64636
EUVD-2025-210354GHSA-4m45-94j7-x2xc
WordPress Donation Thermometer plugin <= 2.2.7 - Broken Access Control vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack