Cart All In One For WooCommerce vulnerabilities | LiveThreat CVE Feed

Product

Cart All In One For WooCommerce

by villatheme · last CVE Feb 18, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Cart All In One For WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-2019	7.2	1%	Feb 18	Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting Affected: through 1.1.21
CVE-2022-46806	4.3	0%	Mar 1	Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification Affected: before 1.1.11