Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.7 - Cross-Site Request Forgery to Settings Chage
high
The Seamless Donations WordPress plugin before 5.1.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
- CVSS:
- 8.8
- Affected:
- up to 5.1.7
- Fixed in:
- 5.1.8
- Disclosed:
- May 26, 2022
CVE-2022-1610 on NVD →
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.12 - Cross-Site Scripting
high
The Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal plugin for WordPress in versions up to, and including, 5.1.12 is vulnerable to Cross-Site Scripting.
- CVSS:
- 7.2
- Affected:
- up to 5.1.12
- Fixed in:
- 5.1.13
- Disclosed:
- May 24, 2022
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database