Read the docs
TI-2026-60333 Aliases CVE-2026-89023GHSA-2wh4-7p8q-3mh2

ThemeAtelier Domain For Sale < 3.5.2 Missing Authorization via REST API

Priority MEDIUM 44CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numeric identifier, and access dashboard statistics to disclose bidder contact information, offer details, messages, verification tokens, and business data.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00385 32nd percentileScored 2026-11-07
Fix Fixed Domain For Sale (ThemeAtelier): 3.5.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ThemeAtelierDomain For Salebefore 3.5.23.5.2Patch availableCNA
  • Domain For Sale VendorThemeAtelier Affected before 3.5.2 Fixed in 3.5.2 Patch available CNA

Remediation

  • Fix · CNA Domain For Sale (ThemeAtelier) Fixed in 3.5.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-89023
  2. 2026-10-03 Alias added: GHSA-2wh4-7p8q-3mh2

References

Other 1

  • TI-2025-10220 IDonate < 2.1.13 - Unauthenticated User Deletion CVSS 3.1MEDIUM 5.4
  • TI-2025-23584 WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2026-12868 Missing authorization in ThemeAtelier ChatHelp – Click to Chat Button, WooCommerce Chat… CVSS 3.1HIGH 7.5
  • TI-2025-04036 Improper authorization in ThemeAtelier IDonate – Blood Donation, Request And Donor… CVSS 3.1HIGH 8.8
  • TI-2025-04034 Improper authorization in ThemeAtelier IDonate – Blood Donation, Request And Donor… CVSS 3.1HIGH 8.8
  • TI-2025-37411 WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability CVSS 3.1HIGH 7.5
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences