Charitable
Wpcharitable · 8 CVEs
WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability
Nov 1, 2024
WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability
Nov 1, 2024
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Obje…
Sep 24, 2024
WordPress Charitable Plugin <= 1.7.0.13 is vulnerable to Cross Site Scripting (XSS)
Nov 22, 2023
Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation
Aug 23, 2023
WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)
May 10, 2023
Charitable – Donation Plugin < 1.6.51 - Authenticated Stored Cross-Site Scripting (XSS)
Aug 23, 2021
The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.
Sep 9, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-37506 | WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability | MEDIUM | 0.38% | Nov 1, 2024 |
| CVE-2024-37510 | WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability | MEDIUM | 0.46% | Nov 1, 2024 |
| CVE-2024-8791 | Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Pri… | CRITICAL | 0.73% | Sep 24, 2024 |
| CVE-2023-47816 | WordPress Charitable Plugin <= 1.7.0.13 is vulnerable to Cross Site Scripting (XSS) | MEDIUM | 0.44% | Nov 22, 2023 |
| CVE-2023-4404 | Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation | CRITICAL | 0.91% | Aug 23, 2023 |
| CVE-2022-47441 | WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.38% | May 10, 2023 |
| CVE-2021-24531 | Charitable – Donation Plugin < 1.6.51 - Authenticated Stored Cross-Site Scripting (XSS) | MEDIUM | 0.58% | Aug 23, 2021 |
| CVE-2018-21011 | The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details. | HIGH | 1.73% | Sep 9, 2019 |
Showing 1 to 8 of 8 CVEs