Wp crowdfunding

This hub aggregates every CVE we track for Wp crowdfunding, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 14 most recently published vulnerabilities affecting Wp crowdfunding.

• CVE-2026-19945WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter6.4Sep 9, 2026
• CVE-2026-19944WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta4.9Sep 9, 2026
• CVE-2025-31892WordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability6.5Apr 1, 2025
• CVE-2025-1508WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download5.3Mar 12, 2025
• CVE-2023-41870WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability4.3Dec 13, 2024
• CVE-2024-11911WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation4.3Dec 13, 2024
• CVE-2024-11910WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Dec 13, 2024
• CVE-2024-43937WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability6.4Nov 1, 2024
• CVE-2024-10117WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode6.4Oct 26, 2024
• CVE-2023-6163WP Crowdfunding < 2.1.10 - Admin+ Stored XSS4.8Jan 15, 2024
• CVE-2023-6161WP Crowdfunding < 2.1.9 - Reflected XSS6.1Jan 8, 2024
• CVE-2023-50859WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)6.5Dec 28, 2023
• CVE-2023-5757WP Crowdfunding < 2.1.8 - Admin+ Stored XSS4.8Dec 11, 2023
• CVE-2023-47532WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)5.8Nov 14, 2023