WordPress Plugin Vulnerabilities

Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.12 - Missing Authorization

Description

The Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.8.11.3. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Fixed in 1.8.12

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No

Timeline

Publicly Published
2026-08-18 (about 1 month ago)
Added
2026-08-24 (about 1 month ago)
Last Updated
2026-08-24 (about 1 month ago)

Other