Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in IDonatePro – Blood Donation, Request And Donor Management WordPress Plugin 2.1.8

  • Severity: high-risk
  • Status: Open
  • Publication: July 16, 2025

The IDonatePro plugin for WordPress has a security issue called Local File Inclusion. This means that anyone can access and run files on the server without being logged in. Attackers can use this vulnerability to run any PHP code they want, even if the file type is supposed to be safe, like images. This can lead to bypassing security measures, accessing confidential information, or executing code on the server.

Detected in:

IDonatePro - Blood Donation, Request And Donor Management WordPress Plugin open vulnerable versions: >= * <= 2.1.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.