CVE-2026-14857
WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers to alter other users' campaigns.
| Vendor | unknown |
| Product | wp crowdfunding |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp crowdfunding
Be the first to know when new unknown vulnerabilities affecting unknown wp crowdfunding are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Crowdfunding
0 < 2.2.1
References
Credits
Sanjorn Keeratirungsan WPScan