CVE-2025-5275

🗓️ 26 Jun 2025 02:22:21Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 26 Views

Charitable plugin for WordPress allows stored cross-site scripting via privacy settings for admins.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-5275	26 Jun 202503:48	–	circl
CNNVD	WordPress plugin Charitable 跨站脚本漏洞	26 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-5275 Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings	26 Jun 202502:22	–	cvelist
EUVD	EUVD-2025-28457	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5275	26 Jun 202503:15	–	nvd
Patchstack	WordPress Charitable plugin <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings vulnerability	26 Jun 202501:17	–	patchstack
Positive Technologies	PT-2025-26926 · WordPress · The Charitable – Donation Plugin For Wordpress	26 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5275	28 Jun 202503:21	–	redhatcve
Vulnrichment	CVE-2025-5275 Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings	26 Jun 202502:22	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 23, 2025 to June 29, 2025)	3 Jul 202513:02	–	wordfence

NVD

Vulners

Node

wpbeginner charitableRange<1.8.6.2-wordpress

[
  {
    "vendor": "smub",
    "product": "Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.8.6.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/453d8918-32dc-43d6-8969-71f719536891
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.5.3/templates/form-fields/checkbox.php

08 Apr 2026 16:49Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14 - 4.4

EPSS0.00176

SSVC

CWE-79