Product by ThemeAtelier

    IDonate

    8 known vulnerabilities in IDonate (ThemeAtelier), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in IDonate (ThemeAtelier)
    CriticalCVE-2025-32519

    WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2024-3594

    IDonate <= 1.9.0 - Admin+ Stored XSS

    		8.7
    HighCVE-2025-4519

    ThemeAtelier Idonate: Improper Authorization

    also in 1 other product

    		8.8
    MediumCVE-2025-4523

    ThemeAtelier Idonate: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		6.5
    MediumCVE-2025-4522

    ThemeAtelier Idonate: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2025-12877

    ThemeAtelier Idonate: Missing Authorization

    		5.3
    MediumCVE-2025-67583

    WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-11154

    IDonate < 2.1.13 - Unauthenticated User Deletion

    		5.4

    All products by ThemeAtelier