Medium
CVE-2026-19945
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filters
Medium
CVE-2026-19944
WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
Medium
CVE-2026-14857
WP Crowdfunding < 2.2.1 - Missing Authorization
Medium
CVE-2026-73189
WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-14858
Crowdfunding <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Data Disclosure
Medium
CVE-2026-14859
Crowdfunding <= 2.2.0 - Missing Authorization
Medium
CVE-2025-31892
WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1508
WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download
Medium
CVE-2024-11911
WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation
Medium
CVE-2024-11910
WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10117
WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode
Medium
CVE-2024-43937
WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons
Medium
CVE-2023-6163
WP Crowdfunding <= 2.1.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50859
WP Crowdfunding <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6161
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-5757
WP Crowdfunding <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47532
WP Crowdfunding <= 2.1.6 - Reflected Cross-Site Scripting via postid
Medium
e4dc8f18-d990-4e41-8bf8-dfa9de4c0f6e
WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2023-41870
WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.