FundEngine – Donation and Crowdfunding Platform vulnerabilities
1 known vulnerability in FundEngine – Donation and Crowdfunding Platform from Roxnor. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
FundEngine – Donation and Crowdfunding Platform: Missing Authorization
The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0. This is due to the plugin not properly verifying user meta updated through the update_user_meta function. This makes it possible for authenti