CVE-2025-64636

The Donation Thermometer plugin versions up to 2.2.7 contain an unauthenticated broken access control vulnerability. An attacker without authentication can gain unauthorized access to plugin functions.

The risk involves potential unauthorized access to sensitive plugin functions, which may lead to data integrity compromise or unauthorized actions within the system.

It is recommended to immediately update the Donation Thermometer plugin to the latest available version that addresses this vulnerability.