Skip to content
OpenAdvisories

Vendor

themeatelier

15 known vulnerabilities.

Products

IDonatePro 5 IDonate – Blood Donation, Request And Donor Management System 4 ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form 2 Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries 1 Domain For Sale 1 Chat Help 1 Better Chat Support for Messenger 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.6
    CVE-2026-89023

    ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API

    ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer rec…

    themeatelier Domain For Sale Web / CMS
  • High 7.5
    CVE-2026-15291

    Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/{id}. This is d…

    themeatelier ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form Web / CMS
  • High 8.8
    CVE-2025-4521

    IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function

    The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_profile() function in versions 2.1.5 to 2.1.9. This makes it possible for authe…

    themeatelier IDonate – Blood Donation, Request And Donor Management System Web / CMS
  • High 7.5
    CVE-2025-60045

    WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects IDonatePro: from n/a through <= 2.1.11.

    themeatelier IDonatePro
  • High 7.5
    CVE-2025-58938

    WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.

    themeatelier IDonatePro
  • High 8.8
    CVE-2025-4519

    IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function

    The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_password() function in versions 2.1.5 to 2.1.9. This makes it possible for auth…

    themeatelier IDonate – Blood Donation, Request And Donor Management System Web / CMS
  • High 8.1
    CVE-2025-30635

    WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through <= 2.1.9.

    themeatelier IDonatePro
  • High 7.5
    CVE-2025-30639

    WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.

    themeatelier IDonatePro