Pi-hole, a network-level ad-blocker, disclosed a security vulnerability in the GiveWP WordPress donation plugin that exposed donor names and email addresses. The flaw made donor information publicly accessible via the webpage's source code, affecting nearly 30,000 donors. No financial data was compromised, as payment details are handled by Stripe and PayPal. The Pi-hole software itself remained unaffected. The incident led to potential reputation damage, with Pi-hole apologizing and criticizing GiveWP's delayed response. The vulnerability was patched within hours, but the breach highlighted the risks of trusting third-party plugins.