A security flaw has been found in the Total Donations plugin for WordPress. All versions of this plugin up to and including version 2.0.5 are affected by this issue.
This vulnerability allows people who do not have any login access to your website to gain full administrator-level control of your site. Someone with administrator access can make any changes to your site, including adding harmful content, stealing private visitor or account data, or taking over your site entirely.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-78570
