Product by Smub
Charitable – Donation Plugin For Wordpress – Fundraising With Recurring Donations & More
8 known vulnerabilities in Charitable – Donation Plugin For Wordpress – Fundraising With Recurring Donations & More (Smub), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-4404 | Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation | 9.8 | |
| Critical | CVE-2024-8791 | WPCharitable Charitable: Authorization Bypass Through User-Controlled Key | 9.8 | |
| Medium | CVE-2026-7619 | Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter | 6.5 | |
| Medium | CVE-2025-11893 | SQL Injection (CVE-2025-11893) | 6.5 | |
| Medium | CVE-2024-10876 | Cross-site Scripting (CVE-2024-10876) | 6.1 | |
| Medium | CVE-2026-10038 | Authorization Bypass Through User-Controlled Key (CVE-2026-10038) | 4.3 | |
| Medium | CVE-2026-3177 | Insufficient Verification of Data Authenticity (CVE-2026-3177) | 5.3 | |
| Medium | CVE-2025-5275 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More: Cross-site Scripting | 4.4 |