CVE-2022-29433: Donations Project Donations

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.

Affected products

• Donations Project Donations: up to and including 1.8

Published 2022-05-13. Last modified 2026-06-17.