CVE-2026-73390
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
Risk Assessment
An unauthenticated attacker can escalate privileges, potentially leading to full system compromise.
Recommendation
Upgrade Total Donations to a version newer than 2.0.5, which includes a fix for this vulnerability.
Other vulnerabilities in Total Donations
See all- CVE-2026-73391Critical
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
- CVE-2026-94159High
The Total Donations plugin for WordPress (up to version 2.0.5) contains a Stored XSS vulnerability due to improper input neutralization during web page generation. An attacker can store malicious JavaScript that executes in the victim's browser each time the infected page is viewed.
Original NVD description (English source)
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS