A notable security flaw has been found in the Donations WordPress plugin, affecting versions up to and including 1.0. This vulnerability, identified as CVE-2025-13001, is a SQL Injection issue that could allow malicious actors to compromise your website’s database.<\/p>\n
Specifically, the plugin fails to properly clean and secure user-provided information before using it in a database query. This oversight opens the door for high-privilege users, such as administrators, to inject harmful SQL code into the system. If exploited, this could lead to unauthorized access to sensitive data, modification of database content, or even complete control over the affected WordPress site.<\/p>\n
Product:<\/strong> Donations WordPress Plugin The SQL Injection vulnerability impacts the Donations WordPress plugin through version 1.0<\/strong>. If you are using this plugin, especially an outdated version, your website could be at risk.<\/p>\n This vulnerability has been Analyzed<\/strong>. Security researchers have thoroughly examined the flaw and confirmed its existence and potential impact.<\/p>\n Rated as Medium<\/strong> severity, this vulnerability presents a significant risk. While it requires high-privilege access (like an administrator account) to exploit, a compromised admin account could lead to severe consequences for your website. Successful exploitation could result in unauthorized data access, manipulation, or even a complete takeover of your site.<\/p>\n As of the latest information, there is No known fix<\/strong> or patch available for the Donations WordPress plugin version 1.0 to address this SQL Injection vulnerability. If you are using this plugin, it is highly recommended to:<\/p>\n https:\/\/wpscan.com\/vulnerability\/4e7a8154-46bf-44c9-ad9a-273e99ae2104\/ Understanding the Donations WordPress Plugin SQL Injection Vulnerability A notable security flaw has been found in the Donations WordPress plugin, affecting versions up to and including 1.0. This vulnerability, identified as CVE-2025-13001, is a SQL Injection issue that could allow malicious actors to compromise your website’s database. Specifically, the plugin fails to properly clean and […]<\/p>\n","protected":false},"author":17,"featured_media":2545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[986,763,695,736,719],"class_list":["post-3247","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-donations-plugin","tag-sql-injection","tag-web-security","tag-wordpress-plugin","tag-wordpress-security"],"blocksy_meta":[],"yoast_head":"\n
CVE ID:<\/strong> CVE-2025-13001
Published Date:<\/strong> December 2, 2025
Severity:<\/strong> Medium<\/p>\nAffected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
References<\/h2>\n
https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2025-13001<\/p>\n","protected":false},"excerpt":{"rendered":"