WP Crowdfunding

Güvenlik açıkları

• CVE-2023-41870giriş gerekir≤ 2.1.5

  WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2025-31892giriş gerekir≤ 2.1.15

  WordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-19945abone+≤ 2.2.1

  WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter

  Orta 6.4

• CVE-2023-47532kimlik doğrulamasız · tıklama gerekir≤ 2.1.6

  WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2023-50859giriş gerekir≤ 2.1.6

  WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-11910katılımcı+≤ 2.1.15

  WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-10117katılımcı+≤ 2.1.11

  WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode

  Orta 5.4

• CVE-2025-1508abone+≤ 2.1.14

  WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download

  Orta 5.3

• CVE-2026-19944mağaza yöneticisi+≤ 2.2.1

  WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta

  Orta 4.9

• CVE-2024-11911abone+≤ 2.1.12

  WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation

  Orta 4.3

• CVE-2024-43937giriş gerekir≤ 2.1.10

  WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability

  Orta 4.3