Crowdfundly vulnerabilities
We track 1 vulnerability in Crowdfundly products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Crowdfundly vulnerabilities
- 7.2 High severity
Crowdfundly: Improper Privilege Management
The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site