A vulnerability classified as problematic was found in IDonate Plugin up to 2.0.0/2.1.9 on WordPress. This vulnerability affects the function admin_donor_profile_view. The manipulation of the argument donor leads to missing authorization.

This vulnerability was named CVE-2025-4523. The attack can be initiated remotely. There is no exploit available.