CVE Intelligence

Kieranoshea Donations vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kieranoshea Donations: 1 record(s), with affected versions and fixes.
cpe:2.3:a:kieranoshea:donations

CVE-2025-13001 Medium · 4.1 CWE-89 Dec 2, 2025
Donation <= 1.0 - Admin+ SQLi
The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks