TI-2025-40004 CVE-2025-64636 · GHSA-4m45-94j7-x2xc
WordPress Donation Thermometer plugin <= 2.2.7 - Broken Access Control vulnerability
Priority LOW 30
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.
No rhewlif vulnerabilities are listed in CISA KEV.
2 records
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a…