CVE-2025-64636

Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.

Credits

Legion Hunter | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/donation-thermometer/vulnerability/wordpress-donation-thermometer-plugin-2-2-7-broken-access-control-vulnerability?_s_id=cve