Charitable vulnerabilities

2 known vulnerabilities in Charitable from Wpcharitable. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Charitable – Donation Plugin for WordPress –…: Authorization Bypass Through User-Controlled Key

  CVE-2024-8791Sep 24, 2024Smub

  The Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.8.1.14. This is due to the plugin not properly verifying a user's identi

• 9.8 Critical severity

  Charitable – Donation Plugin for WordPress –…: Improper Privilege Management

  CVE-2023-4404Aug 23, 2023Smub

  The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to s