WP Attractive Donations System Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WP Attractive Donations System - Easy Stripe & PayPal Donations plugin, specifically in versions through 1.25. This vulnerability allows attackers to trick users into performing actions they did not intend to, potentially leading to unauthorized changes or actions within the WordPress site.

Impact

Exploitation of this vulnerability could allow attackers to perform actions on behalf of users without their consent, potentially leading to unauthorized changes or transactions.

Added: Dec 16, 2025, 9:54 AM
Updated: Dec 16, 2025, 3:06 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
6.4
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.