WordPress idonate has 6 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-3594 | The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such a | high | 8.7 | <2.0.0 | 2.0.0 |
| CVE-2025-4519 | The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missin | high | 8.8 | >=2.1.5 and <2.1.10 | 2.1.10 |
| CVE-2025-4523 | The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized access of data due to a | medium | 6.5 | >=2.0.0 and <2.1.10 | 2.1.10 |
| CVE-2025-12877 | The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized modification od data du | medium | 5.3 | <2.1.16 | 2.1.16 |
| CVE-2025-4522 | The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Insecure Direct Object Reference via | medium | 6.5 | >=2.0.0 and <2.1.10 | 2.1.10 |
| CVE-2025-11154 | The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthe | medium | 5.4 | <2.1.13 | 2.1.13 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked