CD
Product
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
6
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 6Low 0
Watch
Add Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7619 | 6.5 | May 13 | Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter Affected: through 1.8.10.4 |
| CVE-2025-11893 | 6.5 | Oct 25 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection Affected: through 1.8.8.4 |
| CVE-2024-10876 | 6.1 | Nov 9 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting Affected: through 1.8.3 |
| CVE-2026-3177 | 5.3 | Apr 7 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook Affected: through 1.8.9.7 |
| CVE-2026-10038 | 4.3 | Jun 5 | Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter Affected: through 1.8.11.1 |
| CVE-2025-5275 | 4.0 | Jun 26 | Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings Affected: through 1.8.6.1 |
Showing 6