Medium 6.5 Unfixed 2025-04-01≤ 1.2.5 WordPress Donate Me Plugin <= 1.2.5 - Stored Cross-Site Scripting vulnerability CVEWordfenceEUVD
High 7.1 Unfixed 2024-12-02≤ 1.2.5 WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability CVEWordfencePatchstack