Roxnor Fundengine
6 CVEs affecting Roxnor Fundengine. Latest disclosed: 2026-08-20. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73993 | Critical | 9.8 | 2026-08-20 | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. |
CVE-2026-32470 | Critical | 9.8 | 2026-08-18 | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. |
CVE-2025-48302 | High | 7.5 | 2025-08-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine wp-fundraising-donat… |
CVE-2026-59560 | Medium | 6.5 | 2026-07-27 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. |
CVE-2026-57406 | Medium | 6.5 | 2026-07-13 | Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-47459 | Medium | 4.3 | 2025-05-07 | Cross-Site Request Forgery (CSRF) vulnerability in Roxnor FundEngine wp-fundraising-donation allows Cross Site Request Forgery.This issue affects FundEngine: f… |