ThemeAtelier records

8 published records for vendor themeatelier.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 25%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-32519No exploit	WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerabilitythemeatelier · idonate · CWE-98 Pre-auth	Critical9.8	—	0.9%	Apr 11, 2025
35Monitor	CVE-2025-4519No exploit	IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Functionthemeatelier · idonate · CWE-285 Broken access control (IDOR)	High8.8	—	0.3%	Nov 7, 2025
34Monitor	CVE-2024-3594No exploit	IDonate <= 1.9.0 - Admin+ Stored XSSthemeatelier · idonate · CWE-79 XSS	High8.7	—	0.5%	May 23, 2024
26Monitor	CVE-2025-4523No exploit	IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Functionthemeatelier · idonate · CWE-200 Info leak	Medium6.5	—	0.3%	Aug 1, 2025
26Monitor	CVE-2025-4522No exploit	IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Functionthemeatelier · idonate · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.3%	Nov 7, 2025
21Monitor	CVE-2025-12877No exploit	IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletionthemeatelier · idonate · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Nov 22, 2025
21Monitor	CVE-2025-67583No exploit	WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerabilitythemeatelier · idonate · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.2%	Dec 9, 2025
21Monitor	CVE-2025-11154No exploit	IDonate < 2.1.13 - Unauthenticated User Deletionthemeatelier · idonate · CWE-352 CSRF	Medium5.4	—	0.1%	Oct 27, 2025

CVE-2025-32519
39Monitor
WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
themeatelier · idonateApr 11, 2025
CVE-2025-4519
35Monitor
IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
themeatelier · idonateNov 7, 2025
CVE-2024-3594
34Monitor
IDonate <= 1.9.0 - Admin+ Stored XSS
HighCVSS 8.7No exploitEPSS 1%
- XSS
themeatelier · idonateMay 23, 2024
CVE-2025-4523
26Monitor
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
MediumCVSS 6.5No exploitEPSS 0%
- Info leak
themeatelier · idonateAug 1, 2025
CVE-2025-4522
26Monitor
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
themeatelier · idonateNov 7, 2025
CVE-2025-12877
21Monitor
IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themeatelier · idonateNov 22, 2025
CVE-2025-67583
21Monitor
WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themeatelier · idonateDec 9, 2025
CVE-2025-11154
21Monitor
IDonate < 2.1.13 - Unauthenticated User Deletion
MediumCVSS 5.4No exploitEPSS 0%
- CSRF
themeatelier · idonateOct 27, 2025