Advisories · Technology
Charitable.
Every CVE that names Charitable among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass
- Charitable
- CWE-345
- CVSS 4.8 Medium
Charitable < 1.8.5.3 - Admin+ Stored XSS via Photo Field ALT Text
- Charitable
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability
- Charitable
- Broken access control
- CVSS 6.5 Medium
WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability
- Charitable
- Broken access control