Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ midihead

   2mo ago

   As the others have already said, Charitable support is amazing! We had some initial challenges using Charitable with our server configuration, and support was prompt to find and implement solutions for us. The best support team I’ve encountered in a very long time.

   Read on wp.org ↗
2. ★★★★★ hendogc

   2mo ago

   Charitable WP may be the most feature-packed plugin I have used, after searching the internet for a donation plug in for our new WordPress website, Charitable WP won hands down in my opinion, but what truly sets it apart is the outstanding support.David and the support team went above and beyond to help us get the plugin looking and working exactly the way we wanted.They even provided an early upgrade to ensure compatibility with Divi 5, which was incredibly helpful.As a brand-new Marine Rescue Supporters Association, we’re still waiting for our banking details to be finalised before fully launching our new donation system on our new website.We already have a number of people eager to support us and use our Charitable donation page.The level of customer service we’ve received has been fantastic, and that’s worth far more than any extra feature.We can’t wait to get everything live and start using Charitable to support our fundraising efforts. Highly recommended for anyone who is looking for a great feature packed plugin and valued responsive, dedicated support team. Hendo – Promotions MRSGC This topic was modified 1 month ago by hendogc.

   Read on wp.org ↗
3. ★★★★★ mastinfo

   3mo ago

   The excellent partner of my web site!

   Read on wp.org ↗
4. ★★★★★ Garry Rigby

   4mo ago

   David at charitable went beyond the call of duty.Installation and intergration was really clean and simple.As both a developer and donor, I could not wish for a better user experience.Our previous donation plugin caused me and my clients so many problems; this previous plugin and its add-ons used more than 70% of my allocated database storage.Thank you so much.P.S. My only gripe?Me in London and they are in Palm Beach – can’t they get up earlier to help me!

   Read on wp.org ↗
5. ★★★★★ martinpineault

   5mo ago

   Charitable is a great plugin for donations and is highly customizable, provides custom donations and donation suggestions that I liked to use.

   Read on wp.org ↗
6. ★★★★★ ebfuser

   5mo ago

   Thank you so much for the good work! We were experiencing the difficulty – the redirection stopped working well because of a wordpress theme bug, the tech support team were patient and dilligent, the issue is now fixed!

   Read on wp.org ↗
7. ★★★★★ Wade Steele

   6mo ago

   As a web designer, I’ve seen more hosting migrations go sideways than I care to admit. So when a Square payment integration hiccuped mid-migration on a new client build, I braced for the usual support experience — you know, the one where tumbleweeds blow through your inbox for three days. Not here. The Charitable support team was already on it before I finished typing my first email. They communicated clearly, followed up proactively, and resolved everything with the kind of calm professionalism that makes you want to send them a fruit basket. (I didn’t. But I thought about it.) The plugin itself? Intuitive, powerful, and genuinely well-built. But great software with lousy support is just a fancy headache. Charitable delivers both, and that’s rare enough to shout about. This was my first time using Charitable — it will not be my last, and I’ll be recommending it to every client who needs a donation solution. Five stars, no notes, go team.

   Read on wp.org ↗
8. ★★★★★ Arthur

   7mo ago

   Before trying to bootstrap something yourself, as I did, do yourself a favour and invest in Charitable, your future self will thank you! It has a great core and the team have bent over backwards to make it work for my pretty unusual situation (five membership tiers, loads of custom fields, 4 languages…). Let’s be honest, no plugin is designed to be all things to all people. Charitable does donation and donor management exceptionally well and in a delightfully simple environment/interface. It was never designed to be a membership plugin – but actually, for a membership organisation such as our new Gaudí Movement, it’s working fine for annual subscriptions and related member relations (I’ll update this when I have more experience as we grow).

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.11.3 FIX: Hardened Square (Core) payment webhook processing. 8.11.3
2. — Version 8.11.2 FIX: Hardened profile avatar handling to prevent unauthorized attachment deletion. FIX: PayPal Commerce onboarding reliability improvements. 8.11.2
3. — Version 8.11.1 IMPROVED: Polished PayPal Settings screen, adding notice and improving readability. 8.11.1
4. — Version 8.11 NEW: PayPal Commerce gateway – accept one-time donations via PayPal wallet (Venmo, Pay Later) and inline credit/debit card (Advanced Card Processing). NEW: Site-level PayPal tier lock allows new installs and Commerce-tie 8.11
5. — Version 8.10.5 NEW: Redesigned the “What’s New” splash screen with a new hero section, video, and upgrade buttons. NEW: Added a Form navigation icon in the campaign builder with an upgrade prompt for the Charitable Pro visual form buil 8.10.5
6. — Version 8.10.4 FIX: Fixed an issue where multiple Stripe webhook endpoints could accumulate over time, causing donation webhook events to fail signature verification in certain scenarios. 8.10.4

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.11.3 - Missing Authorization ↗
   2026-08-18 CVE-2026-73994 Missing Authorization Affects <= 1.8.11.3 Patched in 1.8.12
2. Medium · 5.3 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.12 - Unauthenticated Donation Payment Bypass ↗
   2026-08-14 CVE-2026-16650 Insufficient Verification of Data Authenticity Affects < 1.8.12 Patched in 1.8.12
3. Medium · 4.4 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2026-08-02 CVE-2025-15675 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.8.5.3 Patched in 1.8.5.3
4. Medium · 4.3 Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter ↗
   2026-06-05 CVE-2026-10038 Authorization Bypass Through User-Controlled Key Affects <= 1.8.11.1 Patched in 1.8.11.2
5. Medium · 6.5 Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter ↗
   2026-05-12 CVE-2026-7619 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.8.10.4 Patched in 1.8.10.5
6. Medium · 5.3 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook ↗
   2026-04-06 CVE-2026-3177 Insufficient Verification of Data Authenticity Affects <= 1.8.9.7 Patched in 1.8.10
7. Medium · 6.5 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection ↗
   2025-10-24 CVE-2025-11893 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.8.8.4 Patched in 1.8.8.5
8. Medium · 4.4 Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings ↗
   2025-06-25 CVE-2025-5275 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.6.1 Patched in 1.8.6.2
9. Medium · 4.4 Charitable <= 1.8.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-05-07 CVE-2025-47520 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.5.1 Patched in 1.8.5.2
10. Medium · 6.4 Charitable <= 1.8.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-03-26 CVE-2025-30770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.4.7 Patched in 1.8.4.8
11. Medium · 6.1 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting ↗
    2024-11-08 CVE-2024-10876 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.3 Patched in 1.8.3.1
12. Critical · 9.8 Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation ↗
    2024-09-23 CVE-2024-8791 Authorization Bypass Through User-Controlled Key Affects <= 1.8.1.14 Patched in 1.8.1.15
13. Medium · 5.3 Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation ↗
    2024-07-04 CVE-2024-37506 Missing Authorization Affects <= 1.8.1.7 Patched in 1.8.1.8
14. Medium · 5.3 Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check() ↗
    2024-07-04 CVE-2024-37510 Missing Authorization Affects <= 1.8.1.7 Patched in 1.8.1.8
15. Medium · 6.4 Charitable <= 1.7.0.13 - Authenticated(Contributor+) Stored Cross-Site Scripting ↗
    2023-10-11 CVE-2023-47816 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.0.14 Patched in 1.7.0.14
16. Critical · 9.8 Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation ↗
    2023-08-17 CVE-2023-4404 Improper Privilege Management Affects <= 1.7.0.12 Patched in 1.7.0.13
17. Medium · 6.1 Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting ↗
    2023-04-19 CVE-2022-47441 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.0.10 Patched in 1.7.0.11
18. Medium · 6.4 Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting ↗
    2021-07-21 CVE-2021-24531 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.50 Patched in 1.6.51
19. High · 7.2 Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting ↗
    2021-07-21 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.50 Patched in 1.6.51
20. Medium · 5.3 Charitable <= 1.5.13 - Unauthorized Access to Information Disclosure ↗
    2018-05-16 CVE-2018-21011 Missing Authorization Affects < 1.5.14 Patched in 1.5.14

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 113 languages, 1 at 90% or more

Plus 89 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• GiveWP – Donation Plugin and Fundraising Platform 100K+ installs · 4.6★ · 5 shared tags A
• FundEngine – Donation and Crowdfunding Platform 1K+ installs · 4.1★ · 5 shared tags B
• Mission – Donation Plugin for WordPress – Fundraising & Recurring Donations 80+ installs · 4.1★ · 5 shared tags B
• Fundrizer Lite – Donation Plugin for Transparent Fundraising 10+ installs · 3.6★ · 4 shared tags B
• Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More 5K+ installs · 4.3★ · 3 shared tags A
• Donation Thermometer 2K+ installs · 4.2★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) into a readme, a review or a deck. It updates itself.

Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns): 10K+ active installs, 4.9★ (216 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/charitable