Advisories · Technology
Roxnor FundEngine.
Every CVE that names Roxnor FundEngine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
- Roxnor FundEngine
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
- Roxnor FundEngine
- Insecure deserialization
- CVSS 6.5 Medium
WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability
- Roxnor FundEngine
- Broken access control
- CVSS 6.5 Medium
WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability
- Roxnor FundEngine
- Broken access control
- CVSS 7.5 High
WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
- Roxnor FundEngine
- File inclusion
- CVSS 4.3 Medium
WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
- Roxnor FundEngine
- Cross-site request forgery (CSRF)