WordPress Charitable plugin <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Charitable versions = 1.8.8.4...

PT-2025-43722

Name of the Vulnerable Software and Affected Versions The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More versions prior to 1.8.8.5 Description The Charitable – Donation Plugin for WordPress is susceptible to SQL Injection via the donation ids parameter...

CVE-2006-0978

The CVE-2006-0978 entry refers to multiple XSS vulnerabilities in the View Headers (viewheaders) functionality of ArGoSoft Mail Server Pro 1.8.8.5, allowing remote attackers to inject arbitrary web script or HTML via the Subject, From, and other headers. Connected sources corroborate the same iss...