Skip to content
Themeatelier vulnerabilities
Newest
-
themeatelier domain for sale
ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API
CVE-2026-89023
8.8 High
-
themeatelier chathelp – click to chat button, woocommerce chat to order & floating chat form
ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes
CVE-2026-15759
6.4 Medium
-
themeatelier chathelp – click to chat button, woocommerce chat to order & floating chat form
Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2026-15291
7.5 High
-
themeatelier idonate – blood donation, request and donor management system
IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function
CVE-2025-4521
8.8 High
-
themeatelier idonatepro
WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability
CVE-2025-60045
7.5 High
-
themeatelier idonatepro
WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability
CVE-2025-58938
7.5 High
-
foysal imran idonate
WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability
CVE-2025-67583
5.3 Medium
-
faysal61 idonate – blood donation, request and donor management system, themeatelier idonate +1 more
IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2025-12877
5.3 Medium
-
themeatelier better chat support for messenger
WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability
CVE-2025-66113
5.3 Medium
-
themeatelier chat help
WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability
CVE-2025-66099
5.3 Medium
-
themeatelier idonate, idonate – blood donation, request and donor management system +1 more
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
CVE-2025-4522
6.5 Medium
-
themeatelier idonate, idonate – blood donation, request and donor management system +1 more
IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function
CVE-2025-4519
8.8 High
-
foysal imran idonate
IDonate < 2.1.13 - Unauthenticated User Deletion
CVE-2025-11154
5.4 Medium
-
themeatelier idonatepro
WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability
CVE-2025-52752
6.5 Medium
-
themeatelier idonatepro
WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability
CVE-2025-30635
8.1 High
-
themeatelier idonatepro
WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability
CVE-2025-30639
7.5 High
-
themeatelier idonate, idonate – blood donation, request and donor management system +1 more
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
CVE-2025-4523
6.5 Medium
-
themeatelier domain for sale – sell domains with landing pages, offers & inquiries
Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
CVE-2025-5239
6.4 Medium
-
foysal imran idonate
WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
CVE-2025-32519
8.1 High
-
faysal61 chat support for viber – chat bubble and chat button for gutenberg, elementor and shortcode
Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12457
6.4 Medium
-
fixolab postify: post layout for elementor
WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51893
6.5 Medium
-
foysal imran idonate
IDonate <= 1.9.0 - Admin+ Stored XSS
CVE-2024-3594
8.7 High