Threats Tagged 'cve-2026-19945'
View all threats tagged with 'cve-2026-19945'. Filter and sort to focus on specific types of threats.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19945'
Click on any threat for detailed analysis and mitigation recommendations
CVE Database V5 · 09/09/2026, 04:28:34 UTC 0 The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. An administrator viewing any user's profile via the ?show_user_id= parameter will render the attacker's stored payload in the admin's browser session, enabling cross-privilege script execution. Join the discussion | CVE Database V5 | 09/09/2026, 04:28:34 UTC Added: 09/09/2026, 04:38:29 UTC |
Showing 1 to 1 of 1 result
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console → Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.