Read the docs

jjlemstra

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

jjlemstra records in CISA KEV

No jjlemstra vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-31814 CVE-2025-49899 · GHSA-vjx7-4438-vhhq

WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00343 Published 2025-10-22 No fix listed CWE-862
TI-2025-09351 CVE-2025-10186 · GHSA-g9j8-gqff-mm6g

Missing authorization in jjlemstra WhyDonate – FREE Donate button – Crowdfunding…

Priority LOW 24

The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the remove_row function in all versions up to, and incl…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-10-15 No fix listed CWE-862
Open these records in search →