Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Donorbox – Free Recurring Donation Plugin and Fundraising Platform 7.1.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 19, 2019

The Donorbox plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This type of attack makes it possible for malicious individuals to embed harmful code into webpages. This can happen if the plugin is not updated to the latest version (7.1.1). By not keeping the plugin up to date, attackers can inject code that will execute when users access the affected page.

Detected in:

Donorbox – Free Recurring Donation Plugin and Fundraising Platform fixed vulnerable versions: >= * < 7.1.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.