CVE-2026-81287

The vulnerability allows for SQL injection in Charitable versions up to and including 1.8.12.1, potentially enabling attackers to manipulate database queries and extract sensitive information. Organizations using affected versions of Charitable should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access. Immediate action is recommended for any entity relying on this software for managing donations or user data.