Access violation vulnerability in Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress 1.7.0.12

The Donation Forms by Charitable plugin for WordPress is a tool that helps website owners collect donations from visitors. In versions of the plugin up to 1.7.0.12, there was a security flaw that could have let unauthenticated attackers give themselves a higher level of access to the website than they should have. This was because the plugin did not properly restrict the ‘update_core_user’ function, which allowed attackers to specify their user role during registration.