Vulnerabilidades de Jjlemstra
CVEs publicadas que afetam produtos de Jjlemstra: 2 registro(s), com severidade, exploração e correções.
CVE-2025-49899
Média · 5.3
CWE-862 22/10/2025
Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing...
Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.
CVE-2025-10186
Média · 5.3
CWE-862 15/10/2025
WhyDonate – FREE Donate button – Crowdfunding – Fundraising <= 4.0.15 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion
The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the remove_row function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete rows from the wp_wdplugin_style table.