TH
Vendor
ThemeAtelier
23
CVEs
0
On KEV
0
New 30D
Products
ID9.8
Idonate
Themeatelier
8 CVEs0 on KEV0 new
ID8.1
IDonatePro
ThemeAtelier
5 CVEs0 on KEV0 new
IB8.8
IDonate – Blood Donation, Request And Donor Management System
themeatelier
4 CVEs0 on KEV0 new
CC7.5
ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form
themeatelier
2 CVEs0 on KEV0 new
BC5.3
Better Chat Support for Messenger
ThemeAtelier
1 CVEs0 on KEV0 new
CH5.3
Chat Help
ThemeAtelier
1 CVEs0 on KEV0 new
DF8.6
Domain For Sale
ThemeAtelier
1 CVEs0 on KEV0 new
DF6.4
Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries
themeatelier
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89023 | DF Domain For Sale ThemeAtelier | 8.6 | Sep 14 | ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API |
| CVE-2026-15759 | CC ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form themeatelier | 6.4 | Jul 17 | ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes |
| CVE-2026-15291 | CC ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form themeatelier | 7.5 | Jul 10 | Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure |
| CVE-2025-4521 | IB IDonate – Blood Donation, Request And Donor Management System themeatelier | 8.8 | Feb 19 | IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function |
| CVE-2025-60045 | ID IDonatePro ThemeAtelier | 7.5 | Dec 18 | WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability |
| CVE-2025-58938 | ID IDonatePro ThemeAtelier | 7.5 | Dec 18 | WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability |
| CVE-2025-67583 | ID Idonate Themeatelier | 5.3 | Dec 9 | WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability |
| CVE-2025-12877 | ID Idonate Themeatelier | 5.3 | Nov 22 | IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion |
| CVE-2025-66113 | BC Better Chat Support for Messenger ThemeAtelier | 5.3 | Nov 21 | WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability |
| CVE-2025-66099 | CH Chat Help ThemeAtelier | 5.3 | Nov 21 | WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability |
| CVE-2025-4522 | IB IDonate – Blood Donation, Request And Donor Management System themeatelier | 6.5 | Nov 7 | IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function |
| CVE-2025-4519 | IB IDonate – Blood Donation, Request And Donor Management System themeatelier | 8.8 | Nov 7 | IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function |
| CVE-2025-11154 | ID Idonate Themeatelier | 5.4 | Oct 27 | IDonate < 2.1.13 - Unauthenticated User Deletion |
| CVE-2025-52752 | ID IDonatePro ThemeAtelier | 6.5 | Oct 22 | WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability |
| CVE-2025-30635 | ID IDonatePro ThemeAtelier | 8.1 | Aug 14 | WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability |
| CVE-2025-30639 | ID IDonatePro ThemeAtelier | 7.5 | Aug 14 | WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability |
| CVE-2025-4523 | IB IDonate – Blood Donation, Request And Donor Management System themeatelier | 6.5 | Aug 1 | IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function |
| CVE-2025-5239 | DF Domain For Sale – Sell Domains with Landing Pages, Offers & Inquiries themeatelier | 6.4 | Jun 6 | Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter |
| CVE-2025-32519 | ID Idonate Themeatelier | 9.8 | Apr 11 | WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability |
| CVE-2024-3594 | ID Idonate Themeatelier | 8.7 | May 23 | IDonate <= 1.9.0 - Admin+ Stored XSS |