cleantalk
Vulnerabilities and Security Researches

Whydonate – FREE Donate button – Crowdfunding – Fundraising, CVE-2025-49899

CVE, Research URL

CVE-2025-49899

Published on
Oct 22, 2025
Research Description
Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.
Affected versions
max 4.0.16.
Status
vulnerable