Known vulnerabilities in the And Fundraising Platform plugin
26 security advisories have been published for the And Fundraising Platform plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2026-5510) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2026-14987) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2026-13704) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2026-13246) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2025-13206) HIGH
- And Fundraising Platform - Broken Access Control (CVE-2025-11228) MEDIUM
- And Fundraising Platform - Information Disclosure (CVE-2025-11227) MEDIUM
- And Fundraising Platform - Broken Access Control (CVE-2025-7221) MEDIUM
- And Fundraising Platform - Information Disclosure (CVE-2025-8620) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2025-7205) MEDIUM
- And Fundraising Platform - Security Vulnerability (CVE-2025-4571) MEDIUM
- And Fundraising Platform - Information Disclosure (CVE-2025-2331) MEDIUM
- And Fundraising Platform - Information Disclosure (CVE-2025-2025) MEDIUM
- And Fundraising Platform - Remote Code Execution (CVE-2024-12877) CRITICAL
- And Fundraising Platform - Remote Code Execution (CVE-2024-9634) CRITICAL
- And Fundraising Platform - Remote Code Execution (CVE-2024-8353) CRITICAL
- And Fundraising Platform - SQL Injection (CVE-2024-9130) HIGH
- And Fundraising Platform - Security Vulnerability (CVE-2024-6551) MEDIUM
- And Fundraising Platform - Broken Access Control (CVE-2024-5941) MEDIUM
- And Fundraising Platform - PHP Object Injection (CVE-2024-5932) CRITICAL
- And Fundraising Platform - Broken Access Control (CVE-2024-5940) MEDIUM
- And Fundraising Platform - Broken Access Control (CVE-2024-5939) MEDIUM
- And Fundraising Platform - Security Vulnerability (CVE-2024-5977) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2024-3714) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2024-1957) MEDIUM
- And Fundraising Platform - Cross-Site Scripting (XSS) (CVE-2024-1424) MEDIUM