Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Donations - SQL Injection (CVE-2025-13001)
The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks
PLUGIN
Donations
CVE-2025-13001
Risk Score
Threat Entry
Updated 2026-06-17
Donations - Cross-Site Scripting (XSS) (CVE-2022-29433)
Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin
PLUGIN
Donations
CVE-2022-29433
Risk Score
Threat Entry
Updated 2026-06-17
Donations - SQL Injection (CVE-2022-0782)
The Donations WordPress plugin through 1.8 does not sanitise and escape the nd_donations_id parameter before using it in a SQL statement via the nd_donations_single_cause_form_validate_fields_php_function AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection
PLUGIN
Donations
CVE-2022-0782
Risk Score
Threat Entry
Updated 2026-06-17
Donations - Security Vulnerability (CVE-2019-15772)
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
PLUGIN
Donations
CVE-2019-15772
Risk Score