IDonate
ThemeAtelier
Developer
2.1.17
Latest version
100
Installations
No date
Last updated
Vulnerability history
1 present
5 fixed
4 Mitigation rules
- Broken Access Control vulnerability<= 2.1.15Dec 7, 2025
- WordPress IDonate plugin 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function vulnerability2.1.5-2.1.9Nov 7, 2025
- WordPress IDonate plugin 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function vulnerability2.0.0-2.1.9Nov 7, 2025
- Unauthenticated User Deletion vulnerability< 2.1.13Oct 28, 2025
- Local File Inclusion vulnerability<= 2.1.17Apr 9, 2025
- Admin+ Stored XSS vulnerability< 2.0.0Mar 1, 2024