Software
Zero-day vulnerability in ‘Total Donations’ plugin could allow attackers to take over WordPress sites
Reported by cyware.com
The zero-day affects all versions of Total Donations plugin, a commercial plugin that is used to gather and manage donations. The plugin’s code contains several design flaws that inherently expose the plugin and the WordPress site as a whole to external manipulation. WordPress site owners are being alerted about an unpatched vulnerability discovered in ‘Total Donations’ plugin.
