How many themeatelier IDonatePro CVEs are in CISA KEV?

None of themeatelier IDonatePro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of themeatelier IDonatePro are affected?

4 distinct themeatelier IDonatePro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themeatelier IDonatePro CVEs?

themeatelier IDonatePro's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

What is the average severity of themeatelier IDonatePro CVEs?

The average CVSS base score across themeatelier IDonatePro's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

themeatelier

5 CVEs

themeatelier IDonatePro Vulnerabilities

Name: themeatelier IDonatePro vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for IDonatePro by themeatelier.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2025–2025

Last updated December 18, 2025

Overview

themeatelier IDonatePro has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themeatelier IDonatePro, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themeatelier IDonatePro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themeatelier IDonatePro's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No themeatelier IDonatePro CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every themeatelier IDonatePro version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.1.94 CVEs
<= 2.1.111 CVE

Fixed in

> 2.1.94 CVEs
> 2.1.111 CVE

Find a version

5 CVEs

Sort

WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability
CVE-2025-60045
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (22th pct)2025-12-18
WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability
CVE-2025-58938
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (20th pct)2025-12-18
WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability
CVE-2025-52752
Patch
CWE-497
Medium · CVSS 6.5
EPSS 0.3% (25th pct)2025-10-22
WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability
CVE-2025-30635
Patch
CWE-98
High · CVSS 8.1
EPSS 0.5% (37th pct)2025-08-14
WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability
CVE-2025-30639
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (23th pct)2025-08-14

Common weakness types

The CWE weakness categories most often found in themeatelier IDonatePro CVEs. Follow any weakness for its full explanation.

Other themeatelier products

Browse vulnerabilities for other products by themeatelier.

idonate8 CVEs IDonate – Blood Donation, Request And Donor Management System4 CVEs ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form2 CVEs Better Chat Support for Messenger1 CVEs Chat Help1 CVEs Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries1 CVEs

All themeatelier vulnerabilities

Frequently asked questions

Common questions about themeatelier IDonatePro vulnerabilities.

How many CVEs does themeatelier IDonatePro have?: themeatelier IDonatePro has 5 published CVE records since 2025.
How many themeatelier IDonatePro CVEs are in CISA KEV?: None of themeatelier IDonatePro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for themeatelier IDonatePro vulnerabilities?: No themeatelier IDonatePro CVEs currently have a tracked public exploit in this dataset.
Which versions of themeatelier IDonatePro are affected?: 4 distinct themeatelier IDonatePro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in themeatelier IDonatePro CVEs?: themeatelier IDonatePro's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
What is the average severity of themeatelier IDonatePro CVEs?: The average CVSS base score across themeatelier IDonatePro's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themeatelier IDonatePro vulnerabilities

Monitor new themeatelier IDonatePro vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing