Rolly Bueno

Bueno Consulting

<p>Charity Campaigns lets you create fundraising campaigns and accept donations securely via Stripe. It focuses on simplicity, privacy, and a great admin workflow.</p>
<p>Key features:</p>
<ul>
<li>Custom post types for Campaigns and Donations</li>
<li>Stripe payment processing (Payment Intents, Stripe Elements)</li>
<li>Anonymous donations (name and email not stored if selected)</li>
<li>Shortcode-based donation form (no blocks required)</li>
<li>Campaign goals, progress, and completion handling</li>
<li>Admin dashboard: overview, activity, and reports</li>
</ul>
<p>Shortcode:</p>
<ul>
<li><code>[ccfs_donation_form]</code> – Basic donation form</li>
<li>Supported attributes: <code>campaign_id</code>, <code>campaign</code>, <code>amount</code>, <code>button_text</code>, <code>show_goal</code>, <code>show_progress</code>, <code>show_predefined_amounts</code>, <code>style</code> (default|minimal|featured), <code>class</code></li>
</ul>
<h4>External Services</h4>
<p>This plugin uses the <a href="https://api.stripe.com/v1/" rel="nofollow ugc">Stripe API</a> to create and confirm Payment Intents and loads <a href="https://stripe.com/docs/js" rel="nofollow ugc">Stripe.js (Elements)</a> from <a href="https://stripe.com/" rel="nofollow ugc">Stripe.com</a> to securely collect payment details for donations.</p>
<p>Information required to interact with Stripe:</p>
<ul>
<li><strong>Publishable Key (<code>pk_test_*</code> or <code>pk_live_*</code>)</strong> – Initializes Stripe.js on the frontend.</li>
<li><strong>Secret Key (<code>sk_test_*</code> or <code>sk_live_*</code>)</strong> – Creates and confirms Payment Intents from the server.</li>
<li><strong>Amount & Currency</strong> – The donation total and currency for the Payment Intent.</li>
<li><strong>Metadata (optional)</strong> – Campaign and donation identifiers to reconcile payments.</li>
<li><strong>Donor Name & Email (optional)</strong> – Included only if the donor is not anonymous.</li>
</ul>
<p>How it’s used:</p>
<ul>
<li>The plugin creates a Payment Intent (amount, currency, optional metadata) and loads Stripe.js to securely collect card details.</li>
<li>The Payment Intent is confirmed; on success, the donation is recorded with the Stripe transaction ID.</li>
</ul>
<p>This plugin does not store card numbers. For details, see:</p>
<ul>
<li><a href="https://stripe.com/legal" rel="nofollow ugc">Stripe Terms of Service</a></li>
<li><a href="https://stripe.com/privacy" rel="nofollow ugc">Stripe Privacy Policy</a></li>
</ul>
<h4>Privacy</h4>
<ul>
<li>Anonymous donations: when donors choose the anonymous option, name and email are not stored.</li>
<li>For non-anonymous donations, donor name and email may be stored in donation records for receipts/reporting.</li>
<li>Payment card details are never sent to or stored on your server. Stripe Elements (hosted by Stripe) handles card data.</li>
</ul>
<h3>Credits</h3>
<p>Charts are powered by <a href="https://www.chartjs.org/" rel="nofollow ugc">Chart.js</a> using <a href="https://github.com/chartjs/Chart.js?tab=MIT-1-ov-file" rel="nofollow ugc">MIT License</a>.</p>


Charity Campaigns & Fundraising System

An easy, privacy-conscious donation and campaign management plugin with Stripe integration, shortcodes, and a clean admin experience.

upstatement

ActBlue

<p>This plugin makes it possible to display your ActBlue Embed forms on your WordPress site by dropping a contribution form link in any WordPress editor.</p>
<h4>Features</h4>
<ul>
<li>Adds an ActBlue Form editor block, which can accept contributions from your own site.</li>
<li>Adds an ActBlue Buttons editor block, which creates a button that will open a form in a modal.</li>
<li>Registers a custom <a href="https://wordpress.org/support/article/embeds/" rel="ugc">oEmbed</a> provider for ActBlue embed forms</li>
<li>Adds the <code>actblue.js</code> script tag to all of your pages to power analytics and conversion features</li>
</ul>
<p>This plugin was designed and built in collaboration with <a href="https://upstatement.com/" rel="nofollow ugc">Upstatement</a>.</p>
<h4>About ActBlue</h4>
<p><a href="https://secure.actblue.com/" rel="nofollow ugc">ActBlue</a> is a nonprofit organization dedicated to empowering small-dollar donors. Its online fundraising platform makes it easy for grassroots supporters to make their voices heard and helps thousands of Democratic campaigns, progressive organizations, and nonprofits build people-powered movements.</p>
<h3>Security</h3>
<p>WordPress’s <a href="https://wordpress.org/about/" rel="ugc">mission</a> to democratize publishing and embrace of <a href="https://opensource.org/osd-annotated" rel="nofollow ugc">open source</a> has led it to be adopted by individuals and organizations of all shapes and sizes. The downside of <a href="https://w3techs.com/technologies/details/cm-wordpress" rel="nofollow ugc">this ubiquity</a>, when paired with the ease of its <a href="https://wordpress.org/support/article/how-to-install-wordpress/" rel="ugc">famous five-minute install</a>, is that it’s a frequent target of attacks and malware.</p>
<p>Additionally, use of the ActBlue Contributions plugin increases your responsibilities as a WordPress site operator/administrator. Your site will act as a conduit through which contributions flow. It is possible that a malicious WordPress plugin may hijack and redirect those contributions or contributor personal information to a malicious site other than ActBlue, so you must exercise increased care when configuring and operating your site.</p>
<p>Here are a few tips to minimize the risks associated with using the ActBlue Contributions plugin with WordPress:</p>
<h4>Keep it secure</h4>
<ul>
<li>If you’re not using a fully managed service like wordpress.com, make sure you’re using a trusted WordPress <a href="https://wordpress.org/hosting/" rel="ugc">hosting provider</a> with a proven track record of security. Look for hosts that have a dedicated support team, provide SSL, manage WordPress updates, and proactively scan for vulnerabilities, misconfigurations, and attacks.</li>
<li>Use <a href="https://wordpress.org/support/article/https-for-wordpress/" rel="ugc">HTTPS</a> URLs for your entire site, especially WordPress core files (starting with <code>wp-</code>). <strong>ActBlue embeds won’t work on non-HTTPS URLs</strong>.</li>
<li>Protect access to the WordPress Dashboard by using <a href="https://krebsonsecurity.com/password-dos-and-donts/" rel="nofollow ugc">strong passwords</a> and <a href="https://wordpress.org/plugins/two-factor/" rel="ugc">Two-Factor Authentication</a> (2FA)</li>
<li>Limit the number of admin users by <a href="https://www.wpbeginner.com/beginners-guide/wordpress-user-roles-and-permissions/" rel="nofollow ugc">using user roles</a></li>
<li><a href="https://wordpress.org/plugins/limit-login-attempts-reloaded/" rel="ugc">Limit login attempts</a> to prevent account credential brute force attacks</li>
<li><a href="https://wordpress.org/support/article/hardening-wordpress/#disable-file-editing" rel="ugc">Disable file editing</a> from within the WordPress Dashboard</li>
<li>Keep a WordPress <a href="https://wordpress.org/plugins/wp-security-audit-log/" rel="ugc">activity log</a> and web request logs and review them regularly for unexpected events. These may be an indication that an admin is behaving maliciously, or that an attacker has gained access to an admin account.</li>
<li>Be wary of email messages requesting that you log into your WordPress account (i.e. <a href="https://securityintelligence.com/news/new-wordpress-phishing-campaigns-target-user-credentials/" rel="nofollow ugc">phishing attacks</a>) and/or upload plugins manually</li>
<li>Protect against denial-of-service and other attacks by putting up a Web Application Firewall (WAF) such as <a href="https://www.cloudflare.com/waf/" rel="nofollow ugc">Cloudflare</a> in front of your site.</li>
<li>Set up routine audits of your site codebase using a malware scanning plugin such as <a href="https://wordpress.org/plugins/wordfence/" rel="ugc">WordFence</a>, <a href="https://wordpress.org/plugins/better-wp-security/" rel="ugc">iThemes Security</a>, or <a href="https://wordpress.org/plugins/sucuri-scanner/" rel="ugc">Sucuri Security</a>.</li>
<li>Continuously back up up your site through your hosting provider or a plugin like <a href="https://wordpress.org/plugins/vaultpress/" rel="ugc">VaultPress</a> or <a href="https://wordpress.org/plugins/updraftplus/" rel="ugc">UpdraftPlus</a>.</li>
</ul>
<h4>Be careful when installing third-party themes or plugins</h4>
<ul>
<li>Only install plugins from trusted sources like the official WordPress.org plugin repository.</li>
<li>Do your due diligence — does it work with the latest version of WordPress? Has it been updated in the last two years? How many people are using it and are they happy with it? All of these questions are easily answered by reviewing the WP.org plugin listing and support forum.</li>
<li>Minimize the number of installed plugins on your site.</li>
</ul>
<h4>Keep it up-to-date</h4>
<ul>
<li>Enable <a href="https://wordpress.org/support/article/updating-wordpress/#automatic-background-updates" rel="ugc">automatic updates</a> for WordPress core and third-party plugins or themes.</li>
<li>Make sure custom theme or plugin components are tested against new WordPress releases.</li>
<li>Make sure your server OS and system packages like PHP and MySQL are up-to-date. A good managed hosting provider like <a href="https://kinsta.com/" rel="nofollow ugc">Kinsta</a> and <a href="https://www.siteground.com/" rel="nofollow ugc">SiteGround</a> will handle all of this for you.</li>
</ul>
<h4>Learn More</h4>
<ul>
<li>https://wordpress.org/support/article/hardening-wordpress/</li>
<li>https://kinsta.com/blog/wordpress-security/</li>
<li>https://sucuri.net/guides/wordpress-security/</li>
<li>https://www.wpbeginner.com/wordpress-security/</li>
<li>https://www.wpwhitesecurity.com/guide-choose-right-plugin-wordpress/</li>
</ul>


ActBlue Contributions

Easily embed your ActBlue contribution forms on any WordPress page. Designed and built by Upstatement.

Charity Campaigns & Fundraising System vs ActBlue Contributions