Vendor

    ThemeAtelier

    20 known vulnerabilities in products by ThemeAtelier, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ThemeAtelier
    HighCVE-2026-15291

    Missing Authorization (CVE-2026-15291)

    		7.5
    CriticalCVE-2025-32519

    WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2026-89023

    ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API

    		8.6
    HighCVE-2025-30635

    WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability

    		8.1
    HighCVE-2024-3594

    IDonate <= 1.9.0 - Admin+ Stored XSS

    		8.7
    HighCVE-2025-4521

    Improper Authorization (CVE-2025-4521)

    		8.8
    HighCVE-2025-4519

    ThemeAtelier Idonate: Improper Authorization

    		8.8
    MediumCVE-2026-15759

    Cross-site Scripting (CVE-2026-15759)

    		6.4
    HighCVE-2025-60045

    WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability

    		7.5
    HighCVE-2025-58938

    WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability

    		7.5
    HighCVE-2025-30639

    WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability

    		7.5
    MediumCVE-2025-52752

    WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability

    		6.5
    MediumCVE-2025-4523

    ThemeAtelier Idonate: Exposure of Sensitive Information to an Unauthorized Actor

    		6.5
    MediumCVE-2025-4522

    ThemeAtelier Idonate: Missing Authorization

    		6.5
    MediumCVE-2025-5239

    Cross-site Scripting (CVE-2025-5239)

    		6.4
    MediumCVE-2025-12877

    ThemeAtelier Idonate: Missing Authorization

    		5.3
    MediumCVE-2025-66099

    WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-67583

    WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-66113

    WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-11154

    IDonate < 2.1.13 - Unauthenticated User Deletion

    		5.4

    Products

    Products by ThemeAtelier
    IDonate80
    ThemeAtelier IDonatePro50
    Idonate – Blood Donation, Request And Donor Management System40