Roxnor FundEngine – Donation and Crowdfunding Platform

• CVE-2026-76063 Medium 6.4 FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter 0.3%
• CVE-2026-75930 Medium 4.3 FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter 0.4%
• CVE-2024-6698 High 8.8 FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation 0.4%