Recurring PayPal Donations
Recurring PayPal Donations has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Recurring PayPal Donations has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Recurring PayPal Donations is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-35676Recurring PayPal Donations <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records

Recurring PayPal Donations
Author
wpecommerce
The Recurring Donations plugin allows you to accept recurring donations via PayPal from your website. It has a user-friendly and simple shortcode that lets you place a donate button anywhere on your WordPress site. You can add the subscription donation widget to your sidebar, posts, pages etc. The recurring donations widget this plugin creates is nice looking and user-friendly. Your users will be able to select a subscription or recurring donation amount and pay you monthly. This plugin allows you to accept one time donations also. So if some users prefer to pay a one-off donation, they can click on the “Donate Once” tab and make a one-time donation payment. Quick installation and setup. Easily take recurring donations via PayPal. Accept ongoing subscription donation on your site. The ultimate plugin to create PayPal recurring donations buttons. Create the donation buttons on the fly and embed them anywhere on your site using a shortcode. Ability to add multiple recurring donation widgets on your site for different causes. Accept subscription donation for various purposes. Allow your users to specify a donation amount that they wish to pay. Ability to accept recurring payment in any PayPal supported currency. Send your users to a custom thank you page after the payment. Option to send your users to a custom cancel return page from PayPal. The setup is very simple and easy. Once you have installed the plugin, all you need to do is enter your PayPal Email address in the plugin settings and your site will be ready to accept recurring donations from users. Shortcode Insert the following shortcode into a page or post to create a donation button. [dntplgn recurring_amt1="25" recurring_amt2="50" recurring_amt3="100" item_name="For the victims of XX"] Here, am1, am2 and am3 are the donation options. Widget In order to place a widget on the sidebar, go to “Appearance -> Widgets” and add a new text widget. Now add the following shortcode to the text widget. [dntplgn] After adding the widget to the sidebar, you can enter a title for the widget and some descriptive text that will appear above the button. You can also customize the shortcode parameters to override the default options. For detailed instructions please check the Recurring Donation Plugin documentation page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C