https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:46:37.564914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4404 CVE-2023-4404 — Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation 2026-10-05T20:46:37.583932+00:00

Affected: smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More

The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.