CVE-2022-1268: Donate Extra Project Donate Extra

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting

Affected products

• Donate Extra Project Donate Extra: version 2.02 only

Published 2022-05-23. Last modified 2026-06-17.