Threats tagged 'ghsa-822f-xqj8-8w45'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.4%	CVE-2025-4519The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege High8.8EPSS 0.4%2025-11-07GCVE DatabaseCVE-2025-4519 The IDonate WordPress plugin versions 2.1.5 to 2.1.9 contains a privilege escalation vulnerability due to a missing capability check in the idonate_donor_password() function. Authenticated users with Subscriber-level access or higher can exploit this flaw to reset passwords of any user, including administrators, potentially leading to full site takeover. EPSS 0.4%Report on CVE-2025-4519 Vulnerability CWE-285 #ghsa-822f-xqj8-8w45	GCVE Database	2025-11-07

Page 1 of 1