CVE-2018-21011

HIGH

Charitable < 1.5.14 - Unauthorized Exposure of User and Donation Details

Title source: llm
STIX 2.1

Description

The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://wordpress.org/plugins/charitable/#developers
Release Notes, Third Party Advisory x_refsource_misc
https://www.wpcharitable.com/release-notes-security-release-1-5-14/

Scores

CVSS v3 7.5
EPSS 0.0173
EPSS Percentile 74.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
wpcharitable/charitable < 1.5.14
Published Sep 09, 2019
Tracked Since Feb 18, 2026