CVE-2023-4404 in Donation Forms Plugin
Summary
by MITRE • 08/23/2023
The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 04/10/2026
The vulnerability identified in CVE-2023-4404 affects the Donation Forms by Charitable plugin for WordPress, specifically impacting versions up to and including 1.7.0.12. This represents a critical privilege escalation flaw that undermines the security model of WordPress installations relying on this plugin. The vulnerability stems from inadequate access controls within the plugin's core functionality, creating a pathway for unauthorized users to manipulate user roles within the WordPress ecosystem.
The technical flaw resides in the 'update_core_user' function which fails to properly validate or restrict the 'role' parameter during user registration processes. This function, intended to manage user role assignments, lacks proper authentication checks and input sanitization mechanisms. Attackers can exploit this weakness by crafting malicious requests that include a 'role' parameter, effectively allowing them to assign administrative or elevated privileges to their accounts without proper authorization. The vulnerability is particularly dangerous because it operates without requiring authentication, making it accessible to anyone who can interact with the plugin's registration endpoints.
The operational impact of this vulnerability extends beyond simple privilege escalation, as it provides attackers with potential access to critical WordPress administrative functions. Once an attacker successfully elevates their user role, they can modify plugin settings, access sensitive donation data, manipulate form configurations, and potentially gain full control over the WordPress installation. This vulnerability directly violates the principle of least privilege and can lead to complete system compromise. The implications are particularly severe for organizations relying on charitable donation platforms, as attackers could access sensitive donor information and manipulate donation records.
Security professionals should immediately implement mitigations including updating to the latest plugin version where this vulnerability has been patched, applying the recommended security hardening measures, and monitoring for unauthorized user role changes. The vulnerability aligns with CWE-284 which addresses improper access control, and maps to ATT&CK technique T1078 for valid accounts and privilege escalation. Organizations should also consider implementing additional security layers such as web application firewalls and monitoring for suspicious parameter manipulation attempts. Regular security audits of WordPress plugins and themes remain essential to identify similar access control weaknesses that could provide similar attack vectors.