Whydonate

wp-whydonate · plugin

Known security vulnerabilities for Whydonate. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Oct 22, 2025

Vulnerabilities

CVE-2023-29238
WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)
High 8.8
CVE-2025-49899
WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability
Medium 5.3
CVE-2025-10186
WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion
Medium 5.3