Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

286 searches this plugin appeared in over the last 90 days, 20 listed. 243 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 8.8 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ midihead

   4mo ago

   As the others have already said, Charitable support is amazing! We had some initial challenges using Charitable with our server configuration, and support was prompt to find and implement solutions for us. The best support team I’ve encountered in a very long time.

   Read on wp.org ↗
2. ★★★★★ hendogc

   5mo ago

   Charitable WP may be the most feature-packed plugin I have used, after searching the internet for a donation plug in for our new WordPress website, Charitable WP won hands down in my opinion, but what truly sets it apart is the outstanding support.David and the support team went above and beyond to help us get the plugin looking and working exactly the way we wanted.They even provided an early upgrade to ensure compatibility with Divi 5, which was incredibly helpful.As a brand-new Marine Rescue Supporters Association, we’re still waiting for our banking details to be finalised before fully launching our new donation system on our new website.We already have a number of people eager to support us and use our Charitable donation page.The level of customer service we’ve received has been fantastic, and that’s worth far more than any extra feature.We can’t wait to get everything live and start using Charitable to support our fundraising efforts. Highly recommended for anyone who is looking for a great feature packed plugin and valued responsive, dedicated support team. Hendo – Promotions MRSGC This topic was modified 1 month ago by hendogc.

   Read on wp.org ↗
3. ★★★★★ mastinfo

   5mo ago

   The excellent partner of my web site!

   Read on wp.org ↗
4. ★★★★★ Garry Rigby

   6mo ago

   David at charitable went beyond the call of duty.Installation and intergration was really clean and simple.As both a developer and donor, I could not wish for a better user experience.Our previous donation plugin caused me and my clients so many problems; this previous plugin and its add-ons used more than 70% of my allocated database storage.Thank you so much.P.S. My only gripe?Me in London and they are in Palm Beach – can’t they get up earlier to help me!

   Read on wp.org ↗
5. ★★★★★ martinpineault

   7mo ago

   Charitable is a great plugin for donations and is highly customizable, provides custom donations and donation suggestions that I liked to use.

   Read on wp.org ↗
6. ★★★★★ ebfuser

   8mo ago

   Thank you so much for the good work! We were experiencing the difficulty – the redirection stopped working well because of a wordpress theme bug, the tech support team were patient and dilligent, the issue is now fixed!

   Read on wp.org ↗
7. ★★★★★ Wade Steele

   8mo ago

   As a web designer, I’ve seen more hosting migrations go sideways than I care to admit. So when a Square payment integration hiccuped mid-migration on a new client build, I braced for the usual support experience — you know, the one where tumbleweeds blow through your inbox for three days. Not here. The Charitable support team was already on it before I finished typing my first email. They communicated clearly, followed up proactively, and resolved everything with the kind of calm professionalism that makes you want to send them a fruit basket. (I didn’t. But I thought about it.) The plugin itself? Intuitive, powerful, and genuinely well-built. But great software with lousy support is just a fancy headache. Charitable delivers both, and that’s rare enough to shout about. This was my first time using Charitable — it will not be my last, and I’ll be recommending it to every client who needs a donation solution. Five stars, no notes, go team.

   Read on wp.org ↗
8. ★★★★★ Arthur

   9mo ago

   Before trying to bootstrap something yourself, as I did, do yourself a favour and invest in Charitable, your future self will thank you! It has a great core and the team have bent over backwards to make it work for my pretty unusual situation (five membership tiers, loads of custom fields, 4 languages…). Let’s be honest, no plugin is designed to be all things to all people. Charitable does donation and donor management exceptionally well and in a delightfully simple environment/interface. It was never designed to be a membership plugin – but actually, for a membership organisation such as our new Gaudí Movement, it’s working fine for annual subscriptions and related member relations (I’ll update this when I have more experience as we grow).

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.11.3 FIX: Hardened Square (Core) payment webhook processing. 8.11.3
2. — Version 8.11.2 FIX: Hardened profile avatar handling to prevent unauthorized attachment deletion. FIX: PayPal Commerce onboarding reliability improvements. 8.11.2
3. — Version 8.11.1 IMPROVED: Polished PayPal Settings screen, adding notice and improving readability. 8.11.1
4. — Version 8.11 NEW: PayPal Commerce gateway – accept one-time donations via PayPal wallet (Venmo, Pay Later) and inline credit/debit card (Advanced Card Processing). NEW: Site-level PayPal tier lock allows new installs and Commerce-tie 8.11
5. — Version 8.10.5 NEW: Redesigned the “What’s New” splash screen with a new hero section, video, and upgrade buttons. NEW: Added a Form navigation icon in the campaign builder with an upgrade prompt for the Charitable Pro visual form buil 8.10.5
6. — Version 8.10.4 FIX: Fixed an issue where multiple Stripe webhook endpoints could accumulate over time, causing donation webhook events to fail signature verification in certain scenarios. 8.10.4

All 23 disclosed vulnerabilities are patched in the current version (1.8.14.1). Sites still on an older version should update.

1. Patched High · 7.2 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.12.3 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-10-05 CVE-2026-104394 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.12.3 Patched in 1.8.13
2. Patched Medium · 6.5 Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute ↗
   2026-08-31 CVE-2026-77189 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.8.12.1 Patched in 1.8.12.2
3. Patched Medium · 6.5 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.12.1 - Authenticated (Subscriber+) SQL Injection ↗
   2026-08-31 CVE-2026-81287 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.8.12.1 Patched in 1.8.12.2
4. Patched Medium · 5.3 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.11.3 - Missing Authorization ↗
   2026-08-18 CVE-2026-73994 Missing Authorization Affects <= 1.8.11.3 Patched in 1.8.12
5. Patched Medium · 5.3 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.12 - Unauthenticated Donation Payment Bypass ↗
   2026-08-14 CVE-2026-16650 Insufficient Verification of Data Authenticity Affects < 1.8.12 Patched in 1.8.12
6. Patched Medium · 4.4 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2026-08-02 CVE-2025-15675 Improper Neutralization of Input During Web Page Generation Affects < 1.8.5.3 Patched in 1.8.5.3
7. Patched Medium · 4.3 Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter ↗
   2026-06-05 CVE-2026-10038 Authorization Bypass Through User-Controlled Key Affects <= 1.8.11.1 Patched in 1.8.11.2
8. Patched Medium · 6.5 Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter ↗
   2026-05-12 CVE-2026-7619 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.8.10.4 Patched in 1.8.10.5
9. Patched Medium · 5.3 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook ↗
   2026-04-06 CVE-2026-3177 Insufficient Verification of Data Authenticity Affects <= 1.8.9.7 Patched in 1.8.10
10. Patched Medium · 6.5 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection ↗
    2025-10-24 CVE-2025-11893 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.8.8.4 Patched in 1.8.8.5
11. Patched Medium · 4.4 Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings ↗
    2025-06-25 CVE-2025-5275 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.6.1 Patched in 1.8.6.2
12. Patched Medium · 4.4 Charitable <= 1.8.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-05-07 CVE-2025-47520 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.5.1 Patched in 1.8.5.2
13. Patched Medium · 6.4 Charitable <= 1.8.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-03-26 CVE-2025-30770 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.4.7 Patched in 1.8.4.8
14. Patched Medium · 6.1 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting ↗
    2024-11-08 CVE-2024-10876 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.3 Patched in 1.8.3.1
15. Patched Critical · 9.8 Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation ↗
    2024-09-23 CVE-2024-8791 Authorization Bypass Through User-Controlled Key Affects <= 1.8.1.14 Patched in 1.8.1.15
16. Patched Medium · 5.3 Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation ↗
    2024-07-04 CVE-2024-37506 Missing Authorization Affects <= 1.8.1.7 Patched in 1.8.1.8
17. Patched Medium · 5.3 Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check() ↗
    2024-07-04 CVE-2024-37510 Missing Authorization Affects <= 1.8.1.7 Patched in 1.8.1.8
18. Patched Medium · 6.4 Charitable <= 1.7.0.13 - Authenticated(Contributor+) Stored Cross-Site Scripting ↗
    2023-10-11 CVE-2023-47816 Improper Neutralization of Input During Web Page Generation Affects < 1.7.0.14 Patched in 1.7.0.14
19. Patched Critical · 9.8 Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation ↗
    2023-08-17 CVE-2023-4404 Improper Privilege Management Affects <= 1.7.0.12 Patched in 1.7.0.13
20. Patched Medium · 6.1 Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting ↗
    2023-04-19 CVE-2022-47441 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.0.10 Patched in 1.7.0.11
21. Patched Medium · 6.4 Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting ↗
    2021-07-21 CVE-2021-24531 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.50 Patched in 1.6.51
22. Patched High · 7.2 Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting ↗
    2021-07-21 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.50 Patched in 1.6.51
23. Patched Medium · 5.3 Charitable <= 1.5.13 - Unauthorized Access to Information Disclosure ↗
    2018-05-16 CVE-2018-21011 Missing Authorization Affects < 1.5.14 Patched in 1.5.14

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 113 languages, 2 at 90% or more

Plus 89 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2018-02-01 8K+ → 10K+ up after 216 days in tier
2. 2017-06-30 7K+ → 8K+ up after 46 days in tier
3. 2017-05-15 5K+ → 7K+ up after 141 days in tier
4. 2016-12-25 1K+ → 5K+ up after 248 days in tier
5. 2016-04-21 600+ → 1K+ up after 78 days in tier
6. 2016-02-03 300+ → 600+ up after 64 days in tier
7. 2015-12-01 100+ → 300+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) into a readme, a review or a deck. It updates itself.

Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns): 10K+ active installs, 4.9★ (219 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/charitable