Skip to content
Noroxi

WP Crowdfunding

wp-crowdfunding · plugin

Known security vulnerabilities for WP Crowdfunding. Find out in seconds which version runs on your site with WP Lens.

11 known vulnerabilities

latest Sep 9, 2026

Vulnerabilities

  • CVE-2023-41870

    WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability

    High 8.8

  • CVE-2025-31892

    WordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-19945

    WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter

    Medium 6.4

  • CVE-2023-47532

    WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2024-11910

    WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-10117

    WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode

    Medium 5.4

  • CVE-2023-50859

    WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2025-1508

    WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download

    Medium 5.3

  • CVE-2026-19944

    WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta

    Medium 4.9

  • CVE-2024-11911

    WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation

    Medium 4.3

  • CVE-2024-43937

    WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability

    Medium 4.3

← Back to directory