Description
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeum | WP Crowdfunding | ≤ 2.2.2 | — |
High · 7.1
CVE-2026-42692
EUVD-2026-112946GHSA-3pmh-527w-mj7c
WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack