Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More, with AI-generated Chinese analysis, references, and POCs.

Vendor: smub

CVE IDTitleCVSSSeverityPublished
CVE-2026-3177 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook CWE-345 5.3 Medium2026-04-07
CVE-2025-11893 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection CWE-89 6.5 Medium2025-10-25
CVE-2025-5275 Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings CWE-79 4.4 Medium2025-06-26
CVE-2024-10876 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-11-09
CVE-2024-8791 Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation CWE-639 9.8 Critical2024-09-24
CVE-2023-4404 Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation CWE-269 9.8 Critical2023-08-23

All 6 known CVE vulnerabilities affecting Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More with full Chinese analysis, references, and POCs where available.