CVE-2026-78568

Name of the Vulnerable Software and Affected Versions Total Donations versions prior to 2.0.6

Description The Total Donations plugin for WordPress contains a flaw that allows unauthenticated attackers to perform SQL Injection. This occurs because the software fails to properly escape user-supplied parameters and lacks sufficient preparation of SQL queries. Consequently, an attacker can append malicious SQL queries to existing ones to extract sensitive information from the database.

Recommendations Update the plugin to a version newer than 2.0.5.