CVE-2024-8791

🗓️ 24 Sep 2024 02:31:00Reported by WordfenceType

The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalatio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8791	24 Sep 202405:42	–	circl
CNNVD	WordPress plugin Donation Forms by Charitable 安全漏洞	23 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8791 Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation	24 Sep 202402:31	–	cvelist
EUVD	EUVD-2024-49421	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8791	24 Sep 202403:15	–	nvd
Patchstack	WordPress Charitable plugin <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation vulnerability	24 Sep 202401:00	–	patchstack
Patchstack	WordPress Charitable Plugin <= 1.8.1.14 is vulnerable to Privilege Escalation	24 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39255 · WordPress · Donation Forms By Charitable	23 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8791	4 Feb 202522:36	–	redhatcve
Vulnrichment	CVE-2024-8791 Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation	24 Sep 202402:31	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

wpcharitable charitableRange<1.8.1.15wordpress

[
  {
    "vendor": "smub",
    "product": "Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.8.1.14",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3154009/charitable/trunk/includes/users/class-charitable-user.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.1.14/includes/users/class-charitable-user.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0ee60943-b583-4a99-8e62-846b380c98aa

08 Apr 2026 16:35Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.00288

SSVC

CWE-639