Cryptocurrency Payment & Donation Box – Accept Payments in any Cryptocurrency on your WP Site for Free, b62a26a6-cea0-46a7-b577-ba8d476ec1b5
- CVE, Research URL
- Published on
- -
- Research Description
- Cryptocurrency Donation Box – Bitcoin & Crypto Donations [cryptocurrency-donation-box] < 1.8 Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation Multiple plugins from the Cool Plugins vendor are missing capability and proper CSRF check in the cool_plugins_install and cool_plugins_activate AJAX actions, available to any authenticated users, allowing them to install and activate arbitrary plugins via an archive hosted on a remote server they control
- Affected versions
-
max 1.8.
- Status
-
vulnerable