CVE-2026-78570: Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Published Aug 25, 2026
·Updated
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Affected Software
1 affected component
WordPress Total Donations<=2.0.5
Event History
Aug 25, 2026
CVE Published
via MITRE·09:27 AM
Rejected
via MITRE·09:27 AM
Data Sourced
via NVD·10:18 AM
Description
Sep 1, 2026
Rejected
via MITRE·01:22 PM
Rejected
via NVD·02:17 PM
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it; no existing WordPress account or privileges are required.
2
Which installations are affected?
Total Donations plugin versions up to and including 2.0.5 are affected. The provided information does not identify any configuration prerequisite or mitigation.
3
What level of access could an attacker obtain?
Successful exploitation can elevate an attacker to administrator privileges, which could allow full administrative control of the affected WordPress site.