WC
Product
WP Crowdfunding
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 12Low 0
Watch
Add WP Crowdfunding to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41870 | 8.8 | Dec 13 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a… Affected: before 2.1.6 |
| CVE-2026-19945 | 6.4 | Sep 9 | WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter Affected: through 2.2.1 |
| CVE-2023-6161 | 6.1 | Jan 8 | The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which… Affected: before 2.1.9 |
| CVE-2023-47532 | 6.1 | Nov 14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themeum WP Crowdfunding plugin <= 2.1.6 versions Affected: through 2.1.6 |
| CVE-2024-11910 | 5.4 | Dec 13 | The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wp-crowdfunding/search block in all versions up to, and including, 2.1.15 due to… Affected: before 2.1.13 |
| CVE-2024-10117 | 5.4 | Oct 26 | The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcf_donate shortcode in all versions up to, and including, 2.1.11 due to… Affected: before 2.1.12 |
| CVE-2023-50859 | 5.4 | Dec 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP Crowdfunding allows Stored XSS.This issue affects WP Crowdfunding:… Affected: through 2.1.6 |
| CVE-2025-1508 | 5.3 | Mar 12 | The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_data action in all versions up to, and… Affected: through 2.1.13 |
| CVE-2026-19944 | 4.9 | Sep 9 | WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta Affected: through 2.2.1 |
| CVE-2023-6163 | 4.8 | Jan 15 | The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 2.1.10 |
| CVE-2023-5757 | 4.8 | Dec 11 | The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 2.1.8 |
| CVE-2024-11911 | 4.3 | Dec 13 | The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the install_woocommerce_plugin() function action in… Affected: before 2.1.13 |
| CVE-2024-43937 | 4.3 | Nov 1 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a… Affected: before 2.1.11 |
Showing 13