Double the Donation – A workplace giving tool

Double the Donation – A workplace giving tool has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 4.5, and the most serious one scores 4.9 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for Double the Donation – A workplace giving tool has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Nabil Irawan. Double the Donation – A workplace giving tool is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
4.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Double the Donation – A workplace giving tool vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.9CVE-2025-12020

Double the Donation <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Double the Donation – A workplace giving tool banner
Latestv3.1.0

Double the Donation – A workplace giving tool

kanwei_doublethedonation

Author

kanwei_doublethedonation

0.0(0)
0/100
Last Updated
2025-11-10 (10mo ago)
Active Installs
1,000+
Downloads
10,903
Requires WP
3.0+
Requires PHP
5.6.20+
Tested up to
WP 6.8.8
Created
2018-07-27 (8y ago)

Double the Donation is the leading provider of matching gift software solutions to nonprofit and educational institutions. Double the Donation increases revenue from corporate matching gifts while saving staff time. This plugin provides a shortcode that allows you to easily embed Double the Donation’s plugin into your website on a dedicated matching gift page. About Our Plugin: After getting set-up with your Double the Donation account and donation form integration, create a dedicated matching gift page on your website to provide your donors with the forms, guidelines, and instructions they need to submit matching gift and volunteer grant requests. Our plugin seamlessly integrates with your WordPress website to instantly connect donors to matching gift and volunteer grant information. On a dedicated matching gift page, you can explain what matching gift programs are and provide donors with a chance to look up their employer’s program forms, guidelines, and instructions. Provide answers to frequently asked questions and your dedicated matching gift page will become a useful resource to include in emails, newsletters, and direct messages. Our WordPress plugin is serviceware, meaning a paid subscription to Double the Donation will be necessary to use our plugin. To find out more about our service, sign up, or get a demo, visit our website here. Benefits: Increase fundraising revenue by presenting matching gift next steps in the donation process: When you work with one of our 70+ integration partners you can add Double the Donation’s search tool directly into your donation flow. This provides donors with the forms, guidelines, and next steps that they need to submit their matching gifts. Increase fundraising revenue by presenting matching gift forms, guidelines, and next steps on a Dedicated Matching Gift Page: Use our WordPress Plugin to embed Double the Donation’s full search tool directly on a dedicated matching gift page. This allows donors who are browsing your website or who receive an email asking them to see if their company will match their gift to easily access the matching gift forms, guidelines, and next steps that they need to submit a matching gift request for your nonprofit. Raise Awareness: Teach donors about employee matching gifts and reap the financial rewards. Double the Donation will help you raise awareness to ensure your eligible donors are thinking about matching gifts. Make It Easy: Make sure the process is as simple as possible. Give donors all they need to successfully submit a matching gift. Double the Donation makes it easy for donors to submit matching gifts. Save Staff Time: Don’t miss out on low-hassle donations! Double the Donation’s service helps you maximize matching gift revenue by making it easy for your donors to submit their match requests. No need for your staff to follow-up as Double the Donation’s platform takes care of the key next steps. About Double the Donation: Double the Donation is the leading provider of employee matching gift tools to nonprofits. Double the Donation’s plugin provides donors with everything they need to submit matching gifts and volunteer grants – Whether their employer will match their donation – Whether their employer will provide a grant if they volunteer regularly – Minimum and maximum amounts matched – Types of employees eligible (Ex. Full-time vs. Part-time vs. Retirees) – Types of nonprofits each company will match to – Submission instructions – Paper matching gift forms and guidelines – Links to electronic matching gift submission forms so donors can submit matches instantly – Contact information – And much more Terms of Use As our plugin is service-ware, usage of it requires a paid subscription, and usage means that you agree to our Terms of Service.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C