GCVE - cpe:2.3:a:themeatelier:idonatepro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:themeatelier:idonatepro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Themeatelier (`fc9600e4-f7f3-5058-8ac9-106dd902d2fb`)
Product	Idonatepro (`23455569-e832-53f4-997a-c8dd433d2ff8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60045`	vulnerable	2026-06-08 07:37:26.534510	WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability HIGH (7.5) Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects IDonatePro: from n/a through <= 2.1.11. Published: 2025-12-18T07:22:00.733Z Updated: 2026-04-28T18:33:41.529Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-11-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58938`	vulnerable	2026-06-08 07:35:19.779468	WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability HIGH (7.5) Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9. Published: 2025-12-18T07:21:57.510Z Updated: 2026-04-28T16:13:50.120Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-9-broken-access-control-vulnerability-2?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52752`	vulnerable	2026-06-08 07:31:12.919957	WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability MEDIUM (6.5) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through <= 2.1.9. Published: 2025-10-22T14:32:25.039Z Updated: 2026-04-28T19:04:38.622Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-9-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30639`	vulnerable	2026-06-08 07:17:00.759029	WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability HIGH (7.5) Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through <= 2.1.9. Published: 2025-08-14T10:34:29.865Z Updated: 2026-04-28T16:11:56.731Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-9-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30635`	vulnerable	2026-06-08 07:17:00.754873	WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability HIGH (8.1) Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through <= 2.1.9. Published: 2025-08-14T10:34:30.395Z Updated: 2026-04-28T16:11:56.536Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-2-1-8-local-file-inclusion-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.