IDonatePro vulnerabilities

4 known vulnerabilities in IDonatePro from ThemeAtelier. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  IDonatePro: Missing Authorization

  CVE-2025-60045Dec 18, 2025ThemeAtelier

  Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects IDonatePro: from n/a through <= 2.1.11.

• 7.5 High severity

  IDonatePro: Missing Authorization

  CVE-2025-58938Dec 18, 2025ThemeAtelier

  Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.

• 7.5 High severity

  IDonatePro: Missing Authorization

  CVE-2025-30639Aug 14, 2025ThemeAtelier

  Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9.

• 8.1 High severity

  IDonatePro: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-30635Aug 14, 2025ThemeAtelier

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through <= 2.1.9.