CRITICAL 9.8 NVD

CVE-2026-78570

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthent

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator.

References

Published: 2026-08-25 · Source: NVD · Feed updated: 2026-08-25

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-08-25 via NVD.

Risk Timeline

CVE Disclosed2026-08-25 · -1 days ago

Remediation Resources

Official Advisory

patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/

Official Advisory

www.wordfence.com/threat-intel/vulnerabilities/id/fa910b80-a496-449c-8

vulnfeed aggregates 12116 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.