SecAlerts
c

charitable

Security Risk Profile

33
/100
low

Security Risk Score

Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 1, 2024 to present

9
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
33/100
low
🆕 1Fresh (<7d)📈 2 in Last 30 Days

Severity Distribution

Critical
0
High
1
Medium
8
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
XSS
3
2
SQL Injection
2

Most Affected Products

1. Charitable Charitable3
2. Charitable Donation Plugin for WordPress3
3. Charitable WordPress plugin2
4. Charitable WordPress Donation Forms2
5. Charitable WordPress plugin Charitable – Donation & Fundraising Platform1

Recent Vulnerabilities

See more →
CVE-2026-77189
CVSS 6.5medium

Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute

Sep 1, 2026🔧 No Patch
CVE-2026-16650
CVSS 5.3medium

Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass

Aug 21, 2026🔧 No Patch
CVE-2025-15675
CVSS 4.8medium

Charitable < 1.8.5.3 - Admin+ Stored XSS via Photo Field ALT Text

Aug 2, 2026🔧 No Patch
CVE-2026-3177
CVSS 5.3medium

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook

Apr 7, 2026🔧 No Patch
CVE-2025-11893
CVSS 8.8high

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection

Oct 25, 2025🔧 No Patch
CVE-2025-5275
CVSS 4.4medium

Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings

Jun 26, 2025🔧 No Patch
CVE-2024-10876
CVSS 6.1medium

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting

Nov 9, 2024🔧 No Patch
CVE-2024-37510
CVSS 6.5medium

WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability

Nov 1, 2024
CVE-2024-37506
CVSS 5.3medium

WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability

Nov 1, 2024

Monitor charitable in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

charitable Security Vulnerabilities & Risk Score | 9 CVEs | SecAlerts - SecAlerts