CVE-2026-14859
WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing Authorization
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers to create crowdfunding campaign posts despite not being granted that permission.
| Vendor | unknown |
| Product | wp crowdfunding |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp crowdfunding
Be the first to know when new unknown vulnerabilities affecting unknown wp crowdfunding are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Crowdfunding
0 < 2.2.1
References
Credits
Sajjad Haqi WPScan