WordPress Vulnerability Scanner WPSec
Vulnerabilities / Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) vulnerabilities

Advisories WPSec published for Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns). Other sources may list more. Its attack surface: Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-13 WPSEC-2026-0825 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.13 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Shortcode Execution and Campaign Settings Disclosure via Builder Field Preview Medium 5.4 1.8.13.1
2026-10-01 WPSEC-2026-0172 Charitable <= 1.8.12.3 - Unauthenticated Reflected Cross-Site Scripting via Donate Button Shortcode Medium 6.1 1.8.13
2026-10-01 WPSEC-2026-0171 Charitable <= 1.8.12.3 - Authenticated (Subscriber+) Limited File Upload via 'charitable_plupload_image_upload' AJAX Action Medium 4.3 1.8.13
2026-10-01 WPSEC-2026-0170 Charitable <= 1.8.12.3 - Authenticated (Contributor+) Sensitive Information Exposure via 'charitable_campaign_preview' Parameter Medium 4.3 1.8.13

License: CC BY 4.0