Critical Privilege Escalation Vulnerability in Charitable WordPress Plugin Affects Over 10,000 sites

On August 10, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a Privilege Escalation vulnerability in the Donation Forms by Charitable plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it possible for an unauthenticated attacker to grant themselves administrative privileges by supplying a role ...
Read More

The post Critical Privilege Escalation Vulnerability in Charitable WordPress Plugin Affects Over 10,000 sites appeared first on Wordfence.

august charitable critical disclosure donation escalation forms intelligence plugin privilege privilege escalation process research responsible responsible disclosure team threat threat intelligence unauthenticated vulnerabilities vulnerability websites wordfence wordpress wordpress plugin wordpress security