CVE-2026-78570: Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Published Aug 25, 2026
·Updated
The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator.
Affected Software
1 affected component
WordPress plugin/Total Donations<=2.0.5
Event History
Aug 25, 2026
CVE Published
via MITRE·09:27 AM
Data Sourced
via MITRE·09:27 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it; no existing WordPress account or privileges are required.
2
Which installations are affected?
Total Donations plugin versions up to and including 2.0.5 are affected. The provided information does not identify any configuration prerequisite or mitigation.
3
What level of access could an attacker obtain?
Successful exploitation can elevate an attacker to administrator privileges, which could allow full administrative control of the affected WordPress site.