Rednao Donations Made Easy Smart Donations vulnerabilities

6 vulnerabilities

Known vulnerabilities in Rednao Donations Made Easy Smart Donations, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2023-40207rednaodonations_made_easy_-_smart_donations+1
EPSS score
0.68%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.7.1CVE-2023-40664rednaodonations_made_easy_-_smart_donations+2
EPSS score
0.41%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions.7.1CVE-2023-47550rednaodonations_made_easy_-_smart_donations+1
EPSS score
0.22%
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.8.8CVE-2023-47551rednaodonations_made_easy_-_smart_donations+1
EPSS score
0.29%
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.8.8CVE-2023-38475rednaodonations_made_easy_-_smart_donations+1
EPSS score
0.60%
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.7.1CVE-2023-32603rednaodonations_made_easy_-_smart_donations+2
EPSS score
0.38%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions.