Jjlemstra vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jjlemstra products: 2 record(s), with severity, exploitation and fixes.

Whydonate 1 WhyDonate – FREE Donate button – Crowdfunding – Fundraising 1

Exploited only (KEV) →

CVE-2025-49899 Medium · 5.3 CWE-862 Oct 22, 2025

Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing...

Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.

CVE-2025-10186 Medium · 5.3 CWE-862 Oct 15, 2025

WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the remove_row function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete rows from the wp_wdplugin_style table.