themeatelier
Web & CMS Pluginsunknown
Latest CVEs
The 15 most recently published vulnerabilities affecting themeatelier.
- CVE-2026-89023ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API8.6
- CVE-2026-15759ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes6.4
- CVE-2026-15291Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure7.5
- CVE-2025-4521IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function8.8
- CVE-2025-60045WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability7.5
- CVE-2025-58938WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability7.5
- CVE-2025-67583WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability5.3
- CVE-2025-12877IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion5.3
- CVE-2025-66113WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability5.3
- CVE-2025-66099WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability5.3
- CVE-2025-4522IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function6.5
- CVE-2025-4519IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function8.8
- CVE-2025-11154IDonate < 2.1.13 - Unauthenticated User Deletion5.4
- CVE-2025-52752WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability6.5
- CVE-2025-30635WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability8.1