rhewlif Donation Thermometer

• CVE-2025-64636 Medium 5.3 WordPress Donation Thermometer plugin <= 2.2.7 - Broken Access Control vulnerability 0.3%
• CVE-2025-67550 Medium 6.5 WordPress Donation Thermometer plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%