CVE-2026-118083: WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability
Published Oct 29, 2026
·Updated
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
Event History
Oct 29, 2026
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated attacker can exploit the issue remotely. No account, prior privileges, or user interaction are required.
2
Which installations are affected?
WP Crowdfunding plugin versions 2.2.2 and earlier are affected.
3
What is the potential impact?
The vulnerability can expose sensitive data. The provided information rates confidentiality impact as high, while integrity and availability are not affected.