ThimPress FundPress – WordPress Donation Plugin

• CVE-2026-4650 Medium 5.3 FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler 0.4%