Skip to content
PluginCanary

Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

by Syed Balkhi · 10,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 5 Oct 2026, fixed in 1.8.13.

82/ 100 Canary Score
Sub-scores for Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)
Ownership100
Maintenance100
Security60
Support60
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 1.8.13. Update to version 1.8.13 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 1.8.12.2. Update to version 1.8.12.2 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 1.8.12.2. Update to version 1.8.12.2 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 18 Aug 2026, fixed in 1.8.12. Update to version 1.8.12 or later.18 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 1.8.12. Update to version 1.8.12 or later.14 Aug 2026Evidence
  • InfoSEC-314 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
WPCharitable19 Aug 2015 to 4 Apr 2019, 94 commits
ericdaams17 Apr 2019 to 22 Apr 2022, 58 commits
dimensionmedia21 Sep 2022 to 29 Oct 2026, 223 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
60
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)
Q1 20244
Q2 20243
Q3 20247
Q4 202411
Q1 20258
Q2 20256
Q3 20257
Q4 20253
Q1 202611
Q2 20266
Q3 20265
Q4 20265

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

60% of 5 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.12.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.8.12.31.8.130
31 Aug 2026Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute6.5<= 1.8.12.11.8.12.20
31 Aug 2026Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.12.1 - Authenticated (Subscriber+) SQL Injection6.5<= 1.8.12.11.8.12.20
18 Aug 2026Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.11.3 - Missing Authorization5.3<= 1.8.11.31.8.120
14 Aug 2026Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.12 - Unauthenticated Donation Payment Bypass5.3< 1.8.121.8.120
2 Aug 2026Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4< 1.8.5.31.8.5.30
5 Jun 2026Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter4.3<= 1.8.11.11.8.11.20
12 May 2026Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter6.5<= 1.8.10.41.8.10.50
6 Apr 2026Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook5.3<= 1.8.9.71.8.100
24 Oct 2025Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection6.5<= 1.8.8.41.8.8.50
25 Jun 2025Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings4.4<= 1.8.6.11.8.6.20
7 May 2025Charitable <= 1.8.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.8.5.11.8.5.20
26 Mar 2025Charitable <= 1.8.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.4.71.8.4.80
8 Nov 2024Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting6.1<= 1.8.31.8.3.10
23 Sep 2024Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation9.8<= 1.8.1.141.8.1.150
4 Jul 2024Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation5.3<= 1.8.1.71.8.1.80
4 Jul 2024Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check()5.3<= 1.8.1.71.8.1.80
11 Oct 2023Charitable <= 1.7.0.13 - Authenticated(Contributor+) Stored Cross-Site Scripting6.4< 1.7.0.141.7.0.141
17 Aug 2023Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation9.8<= 1.7.0.121.7.0.13n/a
19 Apr 2023Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting6.1<= 1.7.0.101.7.0.116
21 Jul 2021Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.501.6.510
21 Jul 2021Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting6.4<= 1.6.501.6.510
16 May 2018Charitable <= 1.5.13 - Unauthorized Access to Information Disclosure5.3< 1.5.141.5.141

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)
Q3 20255.0
Q4 20255.0
Q1 20264.5
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q3 2025 and Q4 2026.

Rating distribution
5 star210
4 star4
3 star1
2 star0
1 star4
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)
4 May 2026544
11 May 20268,668
18 May 202613,857
25 May 20262,145
1 Jun 20267,818
8 Jun 20262,498
15 Jun 20261,426
22 Jun 20261,272
29 Jun 20261,303
6 Jul 20261,675
13 Jul 20261,034
20 Jul 20267,660
27 Jul 20261,723
3 Aug 20262,121
10 Aug 20267,618
17 Aug 20269,643
24 Aug 202613,995
31 Aug 20263,076
7 Sep 20261,390
14 Sep 20261,984
21 Sep 20261,627
28 Sep 20268,393
5 Oct 20263,718
12 Oct 20268,380
19 Oct 20269,088
26 Oct 202616,855
2 Nov 2026472

Weekly downloads over the last 4 weeks are 68% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Donorbox - Free Recurring Donation Plugin and Fundraising PlatformScore 91 · 8,000+Donation Platform for WooCommerce: Fundraising & Donation ManagementScore 91 · 6,000+SureDonation - Donation Forms, Fundraising Campaigns & Donor ManagementScore 91 · 4,000+Buy Me a Coffee - Button and Widget PluginScore 90 · 6,000+Ultimeter - the Ultimate Progress and Goals MeterScore 89 · 1,000+

Facts

Version1.8.14.1
AuthorSyed Balkhi
Added19 Aug 2015
Last updated29 Oct 2026
Active installs10,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsdonate, donation, fundraising, crowdfunding, recurring donations

Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, One Click Demo Import, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Crontrol, PDF Embedder - PDF Viewer & Embed PDF Files for WordPress

Questions

Is Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) still maintained?

Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) safe?

Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) has no open unpatched vulnerabilities on record. 14 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)?

The wordpress.org author is Syed Balkhi. Recent committers: dimensionmedia, ericdaams, WPCharitable, plugin-master. We have recorded no ownership change.

What can I use instead of Charitable - Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)?

Plugins in the same category with a higher Canary Score: Donorbox - Free Recurring Donation Plugin and Fundraising Platform, Donation Platform for WooCommerce: Fundraising & Donation Management, SureDonation - Donation Forms, Fundraising Campaigns & Donor Management, Buy Me a Coffee - Button and Widget Plugin, Ultimeter - the Ultimate Progress and Goals Meter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue