ThemeAtelier vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 20264

Newest CVEs

• CVE-2026-89023

  ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API

  ThemeAtelier · Domain For Sale

  High8.8
• CVE-2026-15759

  ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes

  themeatelier · ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form

  Medium6.4
• CVE-2026-15291

  Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

  themeatelier · ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form

  High7.5
• CVE-2025-4521

  IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function

  themeatelier · IDonate – Blood Donation, Request And Donor Management System

  High8.8
• CVE-2025-60045

  WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability

  ThemeAtelier · IDonatePro

  High7.5
• CVE-2025-58938

  WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability

  ThemeAtelier · IDonatePro

  High7.5
• CVE-2025-66113

  WordPress Better Chat Support for Messenger plugin <= 1.2.18 - Broken Access Control vulnerability

  ThemeAtelier · Better Chat Support for Messenger

  Medium5.3
• CVE-2025-66099

  WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability

  ThemeAtelier · Chat Help

  Medium5.3
• CVE-2025-4522

  IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function

  themeatelier · IDonate – Blood Donation, Request And Donor Management System

  Medium6.5
• CVE-2025-4519

  IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function

  themeatelier · IDonate – Blood Donation, Request And Donor Management System

  High8.8