Themeum WP Crowdfunding

• CVE-2026-118083 High 7.5 WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability 0.3%
• CVE-2026-42692 High 7.1 WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-19945 Medium 6.4 WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter 0.4%
• CVE-2026-19944 Medium 4.9 WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta 0.4%
• CVE-2025-31892 Medium 6.5 WordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-1508 Medium 5.3 WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download 0.4%
• CVE-2023-41870 Medium 4.3 WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability 0.8%
• CVE-2024-11910 Medium 6.4 WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-11911 Medium 4.3 WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation 0.3%
• CVE-2024-43937 Medium 6.4 WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability 0.4%
• CVE-2024-10117 Medium 6.4 WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode 0.4%
• CVE-2023-50859 Medium 6.5 WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS) 0.3%
• CVE-2023-47532 Medium 5.8 WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS) 0.4%