Vulnerabilities

TI-2025-10893 CVE-2025-11882 · GHSA-62f6-ffc9-h987

Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escapi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00193 Published 2025-11-11 No fix listed CWE-79

TI-2025-33299 CVE-2025-53332 · GHSA-v424-6qpw-vmq7

WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through <= 2.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00131 Published 2025-06-27 No fix listed CWE-352

Vulnerabilities

Filters

Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability