The vulnerability identified as CVE-2025-30639 affects ThemeAtelier's IDonatePro plugin (versions ≤ 2.1.9). It involves missing authorization checks that result in incorrect access control enforcement. This allows unauthenticated attackers to perform unauthorized actions that can modify data, impacting the integrity of the system. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with no confidentiality or availability impact but high integrity impact. No official patch or vendor advisory is currently available, and no known exploits have been reported.

Exploitation of this vulnerability can lead to unauthorized modification of data within the affected IDonatePro plugin, compromising data integrity. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual activity related to access control. Avoid exposing the plugin to untrusted users or networks. Follow updates from ThemeAtelier for any forthcoming patches or official mitigations.