How many themeatelier idonate CVEs are in CISA KEV?

None of themeatelier idonate's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of themeatelier idonate are affected?

10 distinct themeatelier idonate versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themeatelier idonate CVEs?

themeatelier idonate's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-285 (Improper Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

How many critical themeatelier idonate vulnerabilities are there?

themeatelier idonate has 1 critical and 2 high-severity CVEs.

What is the average severity of themeatelier idonate CVEs?

The average CVSS base score across themeatelier idonate's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

themeatelier

8 CVEs

themeatelier idonate Vulnerabilities

Name: themeatelier idonate vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for idonate by themeatelier.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2025

Last updated December 9, 2025

Overview

themeatelier idonate has 8 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themeatelier idonate, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themeatelier idonate's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themeatelier idonate's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of themeatelier idonate's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every themeatelier idonate version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.1.162 CVEs
2.0.0 <= v < 2.1.102 CVEs
< 2.0.01 CVE
< 2.1.131 CVE
<= 2.1.161 CVE
2.1.5 <= v < 2.1.101 CVE

Fixed in

2.1.103 CVEs
2.1.162 CVEs
2.0.01 CVE
2.1.131 CVE

Find a version

8 CVEs

Sort

WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability
CVE-2025-67583
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.2% (9th pct)2025-12-09
IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2025-12877
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (18th pct)2025-11-22
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
CVE-2025-4522
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.2% (16th pct)2025-11-07
IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function
CVE-2025-4519
Patch
CWE-285
High · CVSS 8.8
EPSS 0.3% (26th pct)2025-11-07
IDonate < 2.1.13 - Unauthenticated User Deletion
CVE-2025-11154
Public exploit
Patch
Medium · CVSS 5.4
EPSS 0.1% (3th pct)2025-10-27
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
CVE-2025-4523
Patch
CWE-200
Medium · CVSS 6.5
EPSS 0.3% (23th pct)2025-08-01
WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
CVE-2025-32519
Patch
CWE-98
Critical · CVSS 9.8
EPSS 0.9% (55th pct)2025-04-11
High vulnerability · 2024-05-23
CVE-2024-3594
Public exploit
Patch
High · CVSS 8.7
EPSS 0.5% (41th pct)2024-05-23

Common weakness types

The CWE weakness categories most often found in themeatelier idonate CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many themeatelier idonate CVEs were published each year.

2024

1

2025

7

Other themeatelier products

Browse vulnerabilities for other products by themeatelier.

IDonatePro5 CVEs IDonate – Blood Donation, Request And Donor Management System4 CVEs ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form2 CVEs Better Chat Support for Messenger1 CVEs Chat Help1 CVEs Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries1 CVEs

All themeatelier vulnerabilities

Frequently asked questions

Common questions about themeatelier idonate vulnerabilities.

How many CVEs does themeatelier idonate have?: themeatelier idonate has 8 published CVE records since 2024.
How many themeatelier idonate CVEs are in CISA KEV?: None of themeatelier idonate's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for themeatelier idonate vulnerabilities?: Yes — 2 of themeatelier idonate's CVEs have a known public exploit.
Which versions of themeatelier idonate are affected?: 10 distinct themeatelier idonate versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in themeatelier idonate CVEs?: themeatelier idonate's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-285 (Improper Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
How many critical themeatelier idonate vulnerabilities are there?: themeatelier idonate has 1 critical and 2 high-severity CVEs.
What is the average severity of themeatelier idonate CVEs?: The average CVSS base score across themeatelier idonate's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themeatelier idonate vulnerabilities

Monitor new themeatelier idonate vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing