** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Published:
2026-08-25
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Klbtheme | Total Donations | 100% |
|
||||||||
| Wordpress | Wordpress | 80% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Remediation
No vendor fix or workaround currently provided.
OpenCVE Recommended Actions
- Apply the vendor’s patch or upgrade to the latest available version when a fix is released.
- If an immediate upgrade is not feasible, restrict access to the plugin’s administrative pages to the administrator role only and disable the plugin for non-privileged users.
- Review user roles and permissions in WordPress and remove any superuser accounts that are not required for normal operation.
Generated by OpenCVE AI on August 25, 2026 at 10:50 UTC.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
No reference.
History
Tue, 01 Sep 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation | |
| Weaknesses | CWE-269 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Tue, 01 Sep 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator. | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. |
Thu, 27 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 25 Aug 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Klbtheme
Klbtheme total Donations Wordpress Wordpress wordpress |
|
| Vendors & Products |
Klbtheme
Klbtheme total Donations Wordpress Wordpress wordpress |
Tue, 25 Aug 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator. | |
| Title | Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation | |
| Weaknesses | CWE-269 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: REJECTED
Assigner: Wordfence
Published:
Updated: 2026-09-01T13:22:42.888Z
Reserved: 2026-08-24T20:29:20.568Z
Link: CVE-2026-78570
Vulnrichment
Updated:
NVD
Status : Rejected
Published: 2026-08-25T10:18:13.563
Modified: 2026-09-01T14:17:41.633
Link: CVE-2026-78570
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-25T11:30:06Z
Weaknesses
No weakness.