Themeatelier Idonate vulnerabilities

• themeatelier idonate – blood donation, request and donor management system IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function CVE-2025-4521 8.8 HighFebruary 19, 2026
• themeatelier idonatepro WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability CVE-2025-60045 7.5 HighDecember 18, 2025
• themeatelier idonatepro WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability CVE-2025-58938 7.5 HighDecember 18, 2025
• foysal imran idonate WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability CVE-2025-67583 5.3 MediumDecember 9, 2025
• faysal61 idonate – blood donation, request and donor management system, themeatelier idonate +1 more IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2025-12877 5.3 MediumNovember 22, 2025
• themeatelier idonate, idonate – blood donation, request and donor management system +1 more IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function CVE-2025-4522 6.5 MediumNovember 7, 2025
• themeatelier idonate, idonate – blood donation, request and donor management system +1 more IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function CVE-2025-4519 8.8 HighNovember 7, 2025
• foysal imran idonate IDonate < 2.1.13 - Unauthenticated User Deletion CVE-2025-11154 5.4 MediumOctober 27, 2025
• themeatelier idonatepro WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability CVE-2025-52752 6.5 MediumOctober 22, 2025
• themeatelier idonatepro WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability CVE-2025-30635 8.1 HighAugust 14, 2025
• themeatelier idonatepro WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability CVE-2025-30639 7.5 HighAugust 14, 2025
• themeatelier idonate, idonate – blood donation, request and donor management system +1 more IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function CVE-2025-4523 6.5 MediumAugust 1, 2025
• foysal imran idonate WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability CVE-2025-32519 8.1 HighApril 11, 2025
• foysal imran idonate IDonate <= 1.9.0 - Admin+ Stored XSS CVE-2024-3594 8.7 HighMay 23, 2024