CVE-2025-11893

The Charitable – Donation Plugin for WordPress (versions up to and including 1.8.8.4 ) is vulnerable to SQL Injection via the donation_ids parameter. The root cause is insufficient escaping of user-supplied input and a lack of sufficient preparation on existing SQL queries. This allows authentica...