CVE-2026-73391
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
Risk Assessment
An attacker can execute arbitrary SQL queries without authentication, potentially leading to data confidentiality and integrity breaches.
Recommendation
Upgrade Total Donations to a version newer than 2.0.5, which includes a fix for this vulnerability.
Other vulnerabilities in Total Donations
See all- CVE-2026-73390Critical
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
- CVE-2026-94159High
The Total Donations plugin for WordPress (up to version 2.0.5) contains a Stored XSS vulnerability due to improper input neutralization during web page generation. An attacker can store malicious JavaScript that executes in the victim's browser each time the infected page is viewed.
Original NVD description (English source)
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS