Donation Forms WP by Givecloud

Donation Forms WP by Givecloud has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Donation Forms WP by Givecloud has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Donation Forms WP by Givecloud is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Donation Forms WP by Givecloud vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-58842

Donation Forms WP by Givecloud <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.0.11

Donation Forms WP by Givecloud

givecloud

Author

givecloud

0.0(0)
0/100
Last Updated
2025-10-06 (11mo ago)
Active Installs
300+
Downloads
4,393
Requires WP
5.0+
Requires PHP
5.6+
Tested up to
WP 6.6.7
Created
2023-03-13 (4y ago)

Bring Givecloud’s donor-first fundraising tools directly to your WordPress site with this lightweight plugin. While the plugin is free to install, it requires a Givecloud subscription to activate donation features. Designed for Devoted Donors Givecloud’s patented donation form technology combines smart automation, social proof, and impact-centered design—driving up to 45% conversion rates and outperforming traditional plugins by as much as 8x. Two Easy Ways to Add Forms 1. Buttons & Links (Best Performance) Use your Givecloud experience URLs to display pop-up forms on any donate button or link. These distraction-free, mobile-friendly experiences convert at rates up to 3x higher than static forms. 2. Embedded Forms Use the [givecloud] shortcode to embed full donation forms inline with your WordPress content. Compatible with Gutenberg and Elementor blocks for maximum flexibility. 💳 Modern Payment Methods Accept Apple Pay, Google Pay, PayPal, ACH, and credit/debit cards. Optimized for speed and simplicity—just three clicks to complete a donation. 🌍 Multilingual & Multicurrency Support Forms are served in English, French, or Spanish based on donor location, and support over 100+ currencies with your preferred payment gateway. 🔐 Secure, Branded Giving Givecloud forms are PCI and SOC2 compliant, and are hosted in a way that protects your donors while reflecting your brand. 📚 Help Docs & Live Chat Get help at every step with live chat and helpful setup resources: help.givecloud.com 🎯 Want to get started with Givecloud? Book a personalized demo to see how we can help your fundraising thrive.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C