Medium 5.3 Unfixed
2026-04-08≤ 2.2.13
CVE-2026-39691
Minimum safe version
2.2.8
Update to 2.2.8 or later to address 2 fixable vulnerabilities
CVE-2026-39691
CVE-2023-32128
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin <= 1.7 - Arbitrary Plugin Activation vulnerability
WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin <= 1.7 - Arbitrary Plugin Installation vulnerability