A vulnerability identified as problematic has been detected in Bitcoin Donate Button Plugin up to 1.0 on WordPress. Affected is an unknown function of the component Setting Handler. This manipulation causes cross-site request forgery.

This vulnerability is tracked as CVE-2026-1380. The attack is possible to be carried out remotely. No exploit exists.