FD
Product
FundEngine – Donation and Crowdfunding Platform
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add FundEngine – Donation and Crowdfunding Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6698 | 8.8 | Aug 1 | FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation Affected: through 1.7.0 |
| CVE-2026-76063 | 6.4 | Aug 25 | FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter Affected: through 1.8.1 |
| CVE-2026-75930 | 4.3 | Aug 25 | FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter Affected: through 1.8.1 |
Showing 3