Cross-Site Request Forgery in XpeedStudio's WP Fundraising Donation Platform
CVE-2025-47459

4.3MEDIUM

Key Information:

Vendor
WordPress
Status
WP Fundraising Donation And Crowdfunding Platform
Vendor
CVE Published:
7 May 2025

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in XpeedStudio's WP Fundraising Donation and Crowdfunding Platform, impacting versions from n/a through 1.7.3. This vulnerability could allow attackers to execute unauthorized actions on behalf of users without their consent, potentially compromising sensitive information or financial transactions. It is crucial for users of the platform to update to secure their systems and mitigate the risk of exploitation.

Affected Version(s)

WP Fundraising Donation and Crowdfunding Platform <= 1.7.3

References

https://patchstack.com/database/wordpress/plugin/wp-fundr...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.