WP Donate

WP Donate has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include SQL Injection.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

All of these findings were reported by johska. WP Donate is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP Donate vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32637

WP Donate <= 2.0 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-04-15 00:00	WP Donate <= 2.0 - Unauthenticated Stored Cross-Site Scripting WP Donate <= 2.0	`CVE-2025-32637`	6.1 Medium	johska	No
2023-07-16 00:00	WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php WP Donate <= 1.4	`CVE-2015-10122`	9.8 Critical	Anonymous	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv2.0

WP Donate

Author

ketanajani

3.9(15)

78/100

Last Updated

2022-04-26 (4y ago)

Active Installs

20+

Downloads

11,261

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 5.9.16

Created

2013-08-08 (13y ago)

WP Donate provides a payment form and recent donor widget by utilizing stripe.com. What wp-donate provides: Listing of donor at admin area At admin area it allows to set details related to payment gateway From displayed at client side using Shortcode Autherize.net payment gateway integration for accepting donation If you need any modification in plugin or need some extra functionality than please let us know here https://www.webconfines.com/contact-us

View on WordPress.org