Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) vulnerabilities

Product

Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

by smub · last CVE Sep 1, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities1 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-77189	6.5	0%	Sep 1	Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute Affected: through 1.8.12.1