ThemeAtelier vulnerabilities
We track 8 vulnerabilities in ThemeAtelier products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest ThemeAtelier vulnerabilities
- 8.6 High severity
Domain For Sale: Missing Authorization
ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer reco
- 7.5 High severity
ChatHelp – Click to Chat Button, WooCommerce…: Missing Authorization
The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/{id}. This is du
- 8.8 High severity
IDonate – Blood Donation, Request And Donor…: Improper Authorization
The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_profile() function in versions 2.1.5 to 2.1.9. This makes it possible for authen
- 7.5 High severity
IDonatePro: Missing Authorization
Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects IDonatePro: from n/a through <= 2.1.11.
- 7.5 High severity
IDonatePro: Missing Authorization
Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.
- 8.8 High severity
IDonate – Blood Donation, Request And Donor…: Improper Authorization
The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_password() function in versions 2.1.5 to 2.1.9. This makes it possible for authe
- 7.5 High severity
IDonatePro: Missing Authorization
Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.
- 8.1 High severity
IDonatePro: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through <= 2.1.9.