WP Crowdfunding
WP Crowdfunding has 19 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 19 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 7 disclosures.
The most common weakness is Cross-Site Scripting, behind 9 of the records (47%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key.
Every one of the 19 issues recorded for WP Crowdfunding has a vendor fix available, so running the current release closes all known holes.
14 independent researchers contributed these findings, most of them (2) reported by Abu Hurayra (HurayraIIT). WP Crowdfunding is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-19945WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter
Read the full analysisVulnerability Records

WP Crowdfunding
Author
Themeum
WP Crowdfunding is a WooCommerce based plugin that empowers anyone to create a crowdfunding site using WordPress content management system. It’s very user-friendly and convenient to manage. Most of the basic WP Crowdfunding features are offered in this free version. Advanced features like centralised Native Wallet System, Stripe Connect, analytical reports, email notifications, unlimited rewards and so on are available in paid versions. Please read the documentation. Documentation Try WP Crowdfunding http://try.themeum.com/plugins/wp-crowdfunding/ Features Here are the most notable features of WP Crowdfunding plugin. If you need any further information, please feel free to contact us. Below are the best offerings of WP Crowdfunding. Submitting/Adding a Project Dedicated user registration feature Frontend project submission form Project start & end date options Setting a featured image and video Minimum & maximum price options Define a recommended price Declare a funding goal Reward system with estimated delivery date (1 reward in the free version) Campaign end method (Target goal) Campaign end method (Target date) Campaign end method (Target goal & date) Campaign end method (Campaign never ends) More Options for a Published Project Project update option Display the backer(s) in project single page Display the backer(s) name as anonymous Features: Frontend Dashboard Sections for Users Update the profile and contact information See own projects list Check the backed projects list Explore the received pledges list Visit bookmarks list (favorited projects) Change account password Advanced Features for Admins and Developers Template overriding option for developers Standard WordPress dashboard access for WP Crowdfunding, WooCommerce and other configurations Adding and handling the payment methods Exclusive Features in the Paid Version Unlimited rewards with estimated delivery date Native Wallet System to track, calculate, record and distribute all funds (an alternative system of Stripe Connect) Google reCAPTCHA Email notifications Analytical reports Social share Stripe Connect 1 Year plugin update 1 Year Support Plugin package includes an exclusive dedicated theme Many more feature coming soon Please let us know your feedback, if you think something can be more awesome this plugin, we will added it. Shortcode List To use these shortcodes, just place the required shortcode(s) on your desired location. Listing Shortcode [wpcf_listing] Listing Shortcode with specific category [wpcf_listing cat=”cat_name”] Submission Form Shortcode [wpcf_form] Search Shortcode [wpcf_search] Crowdfunding User Dashboard Shortcode [wpcf_dashboard] Crowdfunding User Registration Shortcode [wpcf_registration] Single Campaign [wpcf_single_campaign campaign_id=”post_id”] Campaign Box [wpcf_campaign_box campaign_id=”post_id”] Popular Campaigns [wpcf_popular_campaigns limit=”4″ column=”4″ order=”DESC” class=””] Donate [wpcf_donate campaign_id=”124″ amount=”9000″ min_amount=”5″ max_amount=”1000″ show_input_box=”true” donate_button_text=”Donate”] Pro Version Pro Plugin Crowdfunding Themes Backer Crowdfunding Theme BackNow Crowdfunding Theme Patrios Crowdfunding Theme Author Developed by Themeum
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C