CVE-2026-7619

🗓️ 13 May 2026 04:26:39Reported by WordfenceType

Attacker with edit_others_donations can exploit SQL via s parameter in Charitable 1.8.10.4.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-7619	13 May 202604:26	–	attackerkb
CNNVD	WordPress plugin Charitable SQL注入漏洞	13 May 202600:00	–	cnnvd
Cvelist	CVE-2026-7619 Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter	13 May 202604:26	–	cvelist
EUVD	EUVD-2026-29900	13 May 202604:26	–	euvd
NVD	CVE-2026-7619	13 May 202605:16	–	nvd
Patchstack	WordPress Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin <= 1.8.10.4 - Authenticated (Custom+) SQL Injection vulnerability	12 May 202615:46	–	patchstack
Positive Technologies	PT-2026-40564	13 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-7619	5 Jun 202619:39	–	redhatcve
Vulnrichment	CVE-2026-7619 Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter	13 May 202604:26	–	vulnrichment

Vulners

Node

smub charitable_donation_plugin_for_wordpress_fundraising_with_recurring_donations_&_moreRange≤1.8.10.4wordpress

[
  {
    "vendor": "smub",
    "product": "Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.8.10.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3529172/charitable/trunk/includes/donations/class-charitable-donations.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/trunk/includes/donations/class-charitable-donations.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.9.7/includes/donations/class-charitable-donations.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/950bed9d-8698-4aa0-86a4-fac9e07bb42b
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.10.4/includes/donations/class-charitable-donations.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/trunk/includes/admin/donations/class-charitable-donation-list-table.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.10.4/includes/admin/donations/class-charitable-donation-list-table.php
plugins	www.plugins.trac.wordpress.org/browser/charitable/tags/1.8.9.7/includes/admin/donations/class-charitable-donation-list-table.php

17 Jun 2026 11:02Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

EPSS0.00281

SSVC

CWE-89