Skip to content
Noroxi

FundEngine

wp-fundraising-donation · plugin

Known security vulnerabilities for FundEngine. Find out in seconds which version runs on your site with WP Lens.

10 known vulnerabilities

2 critical · latest Aug 25, 2026

Vulnerabilities

  • CVE-2026-73993

    WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

    Critical 9.8

  • CVE-2026-32470

    WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

    Critical 9.8

  • CVE-2024-6698

    FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation

    High 8.8

  • CVE-2025-48302

    WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2026-59560

    WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2026-57406

    WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2026-76063

    FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter

    Medium 6.4

  • CVE-2024-34758

    WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2026-75930

    FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter

    Medium 4.3

  • CVE-2025-47459

    WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

    Medium 4.3

← Back to directory