Rhewlif vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rhewlif products: 2 record(s), with severity, exploitation and fixes.

Donation Thermometer 2

Exploited only (KEV) →

CVE-2025-64636 Medium · 5.3 CWE-862 Jun 26, 2026

WordPress Donation Thermometer plugin <= 2.2.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.

CVE-2025-67550 Medium · 6.5 CWE-79 Dec 9, 2025

WordPress Donation Thermometer plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through <= 2.2.6.