CVE-2026-73189

WP Crowdfunding versions prior to 2.2.1 are vulnerable to Insecure Direct Object References (IDOR), allowing unauthorized users to access or manipulate sensitive data associated with other subscribers. This vulnerability poses a medium risk, potentially leading to data exposure or unauthorized actions within the application. Organizations using affected versions should prioritize updates to mitigate the risk of exploitation.