Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-30
CVE-2025-13001 - Donations Plugin
The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks
PLUGIN
Donations
CVE-2025-13001
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7294 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to create a mollie payment profile.
PLUGIN
Donations
CVE-2023-7294
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7291 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to set up a mollie account.
PLUGIN
Donations
CVE-2023-7291
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7289 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to change plugin API keys.
PLUGIN
Donations
CVE-2023-7289
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7293 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to verify the existence of a mollie account.
PLUGIN
Donations
CVE-2023-7293
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7292 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to dismiss admin notices.
PLUGIN
Donations
CVE-2023-7292
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7290 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to check profile statuses.
PLUGIN
Donations
CVE-2023-7290
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7288 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to change plugin settings.
PLUGIN
Donations
CVE-2023-7288
Risk Score
Threat Entry
Updated 2024-10-17
CVE-2023-7287 - Donations Plugin
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to cancel a subscription to the plugin.
PLUGIN
Donations
CVE-2023-7287
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-29433 - Donations Plugin
Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin
PLUGIN
Donations
CVE-2022-29433
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0782 - Donations Plugin
The Donations WordPress plugin through 1.8 does not sanitise and escape the nd_donations_id parameter before using it in a SQL statement via the nd_donations_single_cause_form_validate_fields_php_function AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection
PLUGIN
Donations
CVE-2022-0782
Risk Score