CVE Catalog
CVE-2026-78570
CriticalCVSS 9.8Summary
The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.5. This allows unauthenticated attackers to elevate their privileges to administrator level.
Risk Assessment
An unauthenticated attacker can gain full control over the WordPress installation, potentially leading to site takeover, malicious code injection, or data theft.
Recommendation
Immediately update the Total Donations plugin to the latest available version that includes a fix for this vulnerability.
Original NVD description (English source)
The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator.