Known vulnerabilities in Unknown Charitable
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-16650 | The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events… | 5.3 Medium | Aug 21, 2026 |
| CVE-2025-15675 | The Charitable WordPress plugin before 1.8.5.3 does not sanitise and escape one of its campaign image text fields… | 4.8 Medium | Aug 2, 2026 |