CVE-2026-39691
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Missing Authorization vulnerability in Cryptocurrency Donation Box – Bitcoin & Crypto Donations up to version 2.2.13 allows exploiting incorrectly configured access control security levels.
Risk Assessment
Unauthorized users may gain access to administrative functions or data, potentially leading to integrity and confidentiality breaches.
Recommendation
Update the plugin to the latest version if available, or implement custom authorization mechanisms.
Original NVD description (English source)
Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Donation Box – Bitcoin & Crypto Donations: from n/a through <= 2.2.13.