CVE-2026-73390: WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability

Q: Who can exploit this issue?

The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing privileges to exploit it.

Q: What level of impact could successful exploitation have?

Successful exploitation can result in privilege escalation. The supplied severity vector indicates high confidentiality, integrity, and availability impact, with no user interaction required.

Q: Which installations are affected?

WordPress sites using the Total Donations plugin version 2.0.5 or earlier are identified as affected.

Published Aug 19, 2026

Updated

Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.

Affected Software

1 affected component

WordPress Total Donations<=2.0.5

Event History

Aug 19, 2026

CVE Published

via MITRE·12:38 PM

Data Sourced

via MITRE·12:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing privileges to exploit it.

What level of impact could successful exploitation have?

Successful exploitation can result in privilege escalation. The supplied severity vector indicates high confidentiality, integrity, and availability impact, with no user interaction required.

Which installations are affected?