cleantalk
Vulnerabilities and Security Researches

Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress, CVE-2025-30770

CVE, Research URL

CVE-2025-30770

Home page URL

Security reports for Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress

Application

Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress

Published on
Mar 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Charitable allows DOM-Based XSS. This issue affects Charitable: from n/a through 1.8.4.7.
Affected versions
Min -, max 1.8.4.8.
Status
vulnerable
Previous vulnerability researches
Starter Templates — Elementor, WordPress & Beaver Builder Templates (CVE-2023-41805) , Jun 10, 2024
Starter Templates — Elementor, WordPress & Beaver Builder Templates (CVE-2024-47345) , Sep 30, 2024
Starter Templates — Elementor, WordPress & Beaver Builder Templates , Dec 24, 2024
Starter Templates — Elementor, WordPress & Beaver Builder Templates (CVE-2025-24568) , Jan 25, 2025
Starter Templates — Elementor, WordPress & Beaver Builder Templates (CVE-2024-4630) , Jun 06, 2024
New vulnerability
ElementsKit Elementor addons (CVE-2024-11180) , Mar 31, 2025
WP Subscription Forms – The Ultimate WordPress Subscription Form Plugin (CVE-2025-30784) , Mar 29, 2025
Teleport (CVE-2025-28855) , Mar 29, 2025
Support Genix – Support Tickets Managing System & Helpdesk Plugin for WordPress and WooCommerce (CVE-2025-30777) , Mar 29, 2025
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2025-30770) , Mar 28, 2025