Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39691 EUVD-2026-20385GHSA-2chh-fcwm-p667

WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin <= 2.2.13 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Donation Box – Bitcoin & Crypto Donations: from n/a through <= 2.2.13.

Affected products

VendorProductAffectedFixed
AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations ≤ 2.2.13 —

References