CVE-2026-7619

Name of the Vulnerable Software and Affected Versions Charitable – Donation Plugin for WordPress versions prior to 1.8.10.5

Description The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress contains a generic SQL Injection flaw. This issue occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. Authenticated attackers with access to the donation management admin area and the edit others donations capability can append additional SQL queries via the s parameter to extract sensitive information from the database.

Recommendations Update to a version later than 1.8.10.4. As a temporary workaround, restrict access to the donation management admin area to only highly trusted users to minimize the risk of exploitation.