WordPress - Total Donations - CRITICAL - CVE-2026-78570. The Total Donations plugin for WordPress is susceptible to a privilege escalation vulnerability affecting all versions up to and including 2.0.5. This flaw allows unauthenticated attackers to gain elevated privileges, potentially granting them administrator-level access, jeopardizing the security of affected WordPress sites.