Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IDonate – Blood Donation, Request And Donor Management System — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in IDonate – Blood Donation, Request And Donor Management System, with AI-generated Chinese analysis, references, and POCs.

Vendor: themeatelier

CVE IDTitleCVSSSeverityPublished
CVE-2025-4521 IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function CWE-285 8.8 High2026-02-19
CVE-2025-12877 IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CWE-862 5.3 Medium2025-11-22
CVE-2025-4522 IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function CWE-862 6.5 Medium2025-11-07
CVE-2025-4519 IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Function CWE-285 8.8 High2025-11-07
CVE-2025-4523 IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function CWE-200 6.5 Medium2025-08-01

All 5 known CVE vulnerabilities affecting IDonate – Blood Donation, Request And Donor Management System with full Chinese analysis, references, and POCs where available.