Known vulnerabilities in Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)
The best WordPress donation plugin. Create fundraising donation forms, accept recurring donations, easy donor management, add crowdfunding, and more.
21Reported vulnerabilities
9.8Highest CVSS score
1.8.12Latest version
10,000+Active installs
What to do now
Update Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) to 1.8.12.2 or later.
21 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2023-4404 | Critical | 0.9% | 1.7.0.12 and earlier | 1.7.0.13 |
August 23, 2023 |
| CVE-2024-8791 | Critical | 0.7% | Before 1.8.1.15 | 1.8.1.15 |
September 24, 2024 |
| CVE-2018-21011 | High | 1.7% | Before 1.5.14 | 1.5.14 |
September 9, 2019 |
| WF-f8aa8dd6-abff-4c37-98d5-39a924b15651 | High | — | 1.6.50 and earlier | 1.6.51 |
July 21, 2021 |
| CVE-2026-77189 | Medium | 0.3% | 0 to 1.8.12.1 (inclusive) | 1.8.12.2 |
September 1, 2026 |
| CVE-2026-7619 | Medium | 0.3% | 0 to 1.8.10.4 (inclusive) | 1.8.10.5 |
May 13, 2026 |
| CVE-2025-11893 | Medium | 0.4% | 0 to 1.8.8.4 (inclusive) | 1.8.8.5 |
October 25, 2025 |
| CVE-2025-30770 | Medium | 0.3% | 1.8.4.7 and earlier | 1.8.4.8 |
March 26, 2025 |
| CVE-2023-47816 | Medium | 0.4% | Before 1.7.0.14 | 1.7.0.14 |
October 11, 2023 |
| CVE-2024-10876 | Medium | 0.4% | 0 to 1.8.3 (inclusive) | 1.8.3.1 |
November 9, 2024 |
| CVE-2022-47441 | Medium | 0.4% | 1.7.0.10 and earlier | 1.7.0.11 |
April 19, 2023 |
| CVE-2021-24531 | Medium | 0.6% | Before 1.6.51 | 1.6.51 |
August 23, 2021 |
| CVE-2026-16650 | Medium | 0.1% | 0 up to (but not including) 1.8.12 | 1.8.12 |
August 21, 2026 |
| CVE-2026-73994 | Medium | 0.3% | 1.8.11.3 and earlier | 1.8.12 |
August 18, 2026 |
| CVE-2026-3177 | Medium | 0.2% | 0 to 1.8.9.7 (inclusive) | 1.8.10 |
April 7, 2026 |
| CVE-2024-37506 | Medium | 0.4% | 1.8.1.7 and earlier | 1.8.1.8 |
July 4, 2024 |
| CVE-2024-37510 | Medium | 0.5% | 1.8.1.7 and earlier | 1.8.1.8 |
July 4, 2024 |
| CVE-2025-47520 | Medium | 0.3% | 1.8.5.1 and earlier | 1.8.5.2 |
May 7, 2025 |
| CVE-2025-15675 | Medium | 0.2% | Before 1.8.5.3 | 1.8.5.3 |
August 2, 2026 |
| CVE-2026-10038 | Medium | 0.3% | 0 to 1.8.11.1 (inclusive) | 1.8.11.2 |
June 6, 2026 |
| CVE-2025-5275 | Medium | 0.2% | Before 1.8.6.2 | 1.8.6.2 |
June 26, 2025 |