What is GHSA-jc8r-vc53-6jvv?

GHSA-jc8r-vc53-6jvv is a security advisory published by GitHub Security Advisories with Critical severity. The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up...

Which CVE IDs does GHSA-jc8r-vc53-6jvv cover?

GHSA-jc8r-vc53-6jvv covers the following CVE IDs: CVE-2026-78570. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jc8r-vc53-6jvv?

GHSA-jc8r-vc53-6jvv has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-jc8r-vc53-6jvvCriticalCVSS 9.8

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-78570 →

📋 Description

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-78570
https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-privilege-escalation-vulnerability
https://www.wordfence.com/threat-intel/vulnerabilities/id/fa910b80-a496-449c-8227-de7defa1f2ae?source=cve
https://github.com/advisories/GHSA-jc8r-vc53-6jvv