Known vulnerabilities in Donorbox – Free Recurring Donation Plugin and Fundraising Platform

Donorbox is a powerful and secure donation management plugin for WordPress. We are the only donation plugin for WordPress that offers a fast feature-f …

1Reported vulnerabilities

6.4Highest CVSS score

7.1.12Latest version

8,000+Active installs

What to do now

Update Donorbox – Free Recurring Donation Plugin and Fundraising Platform to 7.1.2 or later. 1 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 30, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-a660b7b8-550e-42d7-b15a-0ab2aa501623	Medium 6.4	—	Before 7.1.2	`7.1.2`	December 19, 2019

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.