Total Donations vulnerabilities
4 known CVE vulnerabilities in Total Donations, translated and rated.
- CVE-2026-78570Critical
The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.5. This allows unauthenticated attackers to elevate their privileges to administrator level.
- CVE-2026-78568Critical
The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 2.0.5 due to insufficient escaping on user-supplied parameters and lack of proper query preparation. This allows unauthenticated attackers to append additional SQL queries to existing ones, potentially extracting sensitive information from the database.
- CVE-2026-73391Critical
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
- CVE-2026-73390Critical
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.