CVE-2023-4404

CVE-2023-4404: Privilege escalation in Donation Forms by Charitable for WordPress. Vulnerable in Charitable versions up to 1.7.0.12 due to insufficient restriction in update_core_user, allowing unauthenticated attackers to specify their role during registration. Wordfence and Red Hat advisories d...

CVE-2023-47816

CVE-2023-47816 affects the WordPress Charitable plugin called Charitable Donations & Fundraising Team Donation Forms. Vulnerable in versions

CVE-2024-8791

CVE-2024-8791 affects Charitable – Donation Plugin for WordPress (versions

CVE-2021-24531

CVE-2021-24531 affects the WordPress Charitable – Donation Plugin, versions before 1.6.51. Affected component: add donation feature. Root cause: authenticated stored cross-site scripting (XSS) in the add donation form, enabling script execution with authenticated access. Impact details in sources...

CVE-2022-47441

CVE-2022-47441 affects the WordPress plugin Charitable Donations & Fundraising Team Donation Forms by Charitable, versions

CVE-2018-21011

CVE-2018-21011 affects the WordPress Charitable plugin prior to version 1.5.14, allowing unauthorized access to user and donation details. The issue stems from a vulnerability in the Charitable plugin that leads to information disclosure; CVSS metrics indicate a network-accessible flaw with mediu...