A vulnerability, which was classified as problematic, has been found in Charitable Plugin up to 1.8.6.1/1.8.6.2 on WordPress. This issue affects some unknown processing of the component Privacy Setting Handler. The manipulation leads to cross site scripting.

The identification of this vulnerability is CVE-2025-5275. The attack may be initiated remotely. There is no exploit available.