FundEngine – Donation and Crowdfunding Platform vulnerabilities

Product

FundEngine – Donation and Crowdfunding Platform

by roxnor · last CVE Aug 25, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add FundEngine – Donation and Crowdfunding Platform to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-76063	6.4	0%	Aug 25	FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter Affected: through 1.8.1
CVE-2026-75930	4.3	0%	Aug 25	FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter Affected: through 1.8.1