01 Record

CVE-2026-16650

Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass

MediumPUBLISHEDCNA: WPScan

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

02 Description

Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass

Published

2026-08-21 11:40Z13 HR AGO

Last updated

2026-08-21 12:47Z12 HR AGO

Reserved

2026-07-22

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

8a923a3d5531208658f5cf80564e1adba8e5f35cbb89a28d279ce02fbf46bf39

VendorProductVersionsPlatforms

UnknownCharitable0 to < 1.8.12—