Skip to content
OpenAdvisories

Vendor

themeatelier

15 known vulnerabilities.

Products

IDonatePro 5 IDonate – Blood Donation, Request And Donor Management System 4 ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form 2 Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries 1 Domain For Sale 1 Chat Help 1 Better Chat Support for Messenger 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-15759

    ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes

    The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient…

    themeatelier ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form Web / CMS
  • Medium 5.3
    CVE-2025-66113

    WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeAtelier Better Chat Support for Messenger better-chat-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Chat Support for Messenger: from n/a through <= 1.2.18.

    themeatelier Better Chat Support for Messenger
  • Medium 5.3
    CVE-2025-66099

    WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeAtelier Chat Help chat-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chat Help: from n/a through <= 3.1.3.

    themeatelier Chat Help
  • Medium 6.5
    CVE-2025-4522

    IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function

    The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Insecure Direct Object Reference via the admin_post_donor_delete() function in versions 2.0.0 to 2.1.9. By supplying an arbitrary user_id parameter value t…

    themeatelier IDonate – Blood Donation, Request And Donor Management System Web / CMS
  • Medium 6.5
    CVE-2025-52752

    WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through <= 2.1.9.

    themeatelier IDonatePro
  • Medium 6.5
    CVE-2025-4523

    IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function

    The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the admin_donor_profile_view() function in versions 2.0.0 to 2.1.9. This makes it possible…

    themeatelier IDonate – Blood Donation, Request And Donor Management System Web / CMS
  • Medium 6.4
    CVE-2025-5239

    Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter

    The Domain For Sale plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class_name’ parameter in all versions up to, and including, 3.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authentica…

    themeatelier Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries Web / CMS