CVE-2026-3177

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 1.8.9.7. This is due to missing cryptographic verification of incoming Stripe webhook events. This makes it possible for unauthenticated attackers to forge payment_intent.succeeded webhook payloads and mark pending donations as completed without a real payment.

• CWE-345

• https://plugins.trac.wordpress.org/changeset/3485023/charitable
• https://www.wordfence.com/threat-intel/vulnerabilities/id/bc3b2645-7b57-4884-99c5-e37dbd4a9600?source=cve

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31764In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31765In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31766In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-31767In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31768In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31769In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31770In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31771In the Linux kernel, the following vulnerability has been re…8.1
• CVE-2026-31772In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31773In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-31774In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-31775In the Linux kernel, the following vulnerability has been re…5.5