All packages
Total Donations vulnerabilities
3 known CVE vulnerabilities in Total Donations, translated and rated.
- CVE-2026-73391Critical
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
- CVE-2026-73390Critical
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
- CVE-2026-94159High
The Total Donations plugin for WordPress (up to version 2.0.5) contains a Stored XSS vulnerability due to improper input neutralization during web page generation. An attacker can store malicious JavaScript that executes in the victim's browser each time the infected page is viewed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS