PT-2025-39023 · WordPress · Wp Attractive Donations System

Bibek Dhakal · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58956

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP Attractive Donations System versions prior to 1.29

Description A Cross-Site Request Forgery (CSRF) issue exists in loopus WP Attractive Donations System, which also allows Stored Cross-Site Scripting (XSS). The issue affects the WP Attractive Donations System plugin.

Recommendations Update WP Attractive Donations System to version 1.29 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-58956

Affected Products

Wp Attractive Donations System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-58956 · Security Note
• https://patchstack.com/database/wordpress/plugin/wp-attractive-donations-system-easy-stripe-paypal-donations/vulnerability/wordpress-wp-attractive-donations-system-plugin-1-29-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/33077 · Telegram Post
• https://twitter.com/CVEnew/status/1970198119846486274 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wp-attractive-donations-system-easy-stripe-paypal-donations/vulnerability/wordpress-wp-attractive-donations-system-plugin-1-29-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note