WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability

CVE-2024-53776

What is CVE-2024-53776?

The Donate Me plugin by Raphael Heide is vulnerable to Cross-Site Request Forgery (CSRF), which can lead to Stored Cross-Site Scripting (XSS) under certain conditions. This vulnerability permits an attacker to trick users into executing unintended actions on the affected website, potentially compromising the integrity and security of user data. Affected versions include all versions up to and including 1.2.5. Users of the Donate Me plugin should evaluate their current version and apply recommended updates to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References