Description
WordPress Plugin Accept Stripe Donation-AidWP is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Accept Stripe Donation-AidWP version 3.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.6 or latest
References
Related Vulnerabilities
WordPress Plugin ENL Newsletter SQL Injection (1.0.1)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2787)
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.26)
MySQL CVE-2022-21342 Vulnerability (CVE-2022-21342)
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-23209)