Advisories · Technology

ThemeAtelier IDonatePro.

Every CVE that names ThemeAtelier IDonatePro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-60045 CVE record

CVSS 7.5 High

WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability
- ThemeAtelier IDonatePro
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-58938 CVE record

CVSS 7.5 High

WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability
- ThemeAtelier IDonatePro
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-52752 CVE record

CVSS 6.5 Medium

WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability
- ThemeAtelier IDonatePro
- Information disclosure
Not analysed yet 22 Oct 2025
CVE-2025-30635 CVE record

CVSS 8.1 High

WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability
- ThemeAtelier IDonatePro
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-30639 CVE record

CVSS 7.5 High

WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability
- ThemeAtelier IDonatePro
- Broken access control
Not analysed yet 14 Aug 2025