TH
Vendor
ThemeHigh
22
CVEs
0
On KEV
1
New 30D
Products
EC8.8
Email Customizer for WooCommerce (Pro)
ThemeHigh
1 CVEs0 on KEV1 new
CF9.1
Checkout Field Editor For Woocommerce
Themehigh
3 CVEs0 on KEV0 new
PG9.8
Payment Gateway of Stripe for WooCommerce
themehigh
3 CVEs0 on KEV0 new
AF6.5
Advanced FAQ Manager
ThemeHigh
2 CVEs0 on KEV0 new
CF7.2
Checkout Field Editor (Checkout Manager) for WooCommerce
themehigh
2 CVEs0 on KEV0 new
CF9.1
Checkout Field Editor for WooCommerce (Pro)
Themehigh
2 CVEs0 on KEV0 new
JM8.8
Job Manager & Career
Themehigh
2 CVEs0 on KEV0 new
DP4.3
Dynamic Pricing and Discount Rules
ThemeHigh
1 CVEs0 on KEV0 new
EC7.5
Email Customizer for WooCommerce
ThemeHigh
1 CVEs0 on KEV0 new
EC4.4
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder
themehigh
1 CVEs0 on KEV0 new
EP7.2
Extra Product Options For WooCommerce | Custom Product Addons and Fields
ThemeHigh
1 CVEs0 on KEV0 new
JM8.8
Job Manager & Career โ Manage job board listings, and recruitments
ThemeHigh
1 CVEs0 on KEV0 new
MS9.8
Multiple Shipping Addresses For Woocommerce
Themehigh
1 CVEs0 on KEV0 new
SP6.5
Stripe Payment Gateway for WooCommerce
ThemeHigh
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81534 | EC Email Customizer for WooCommerce (Pro) ThemeHigh | 8.8 | Oct 15 | Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter |
| CVE-2026-102392 | EP Extra Product Options For WooCommerce | Custom Product Addons and Fields ThemeHigh | 7.2 | Sep 30 | WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability |
| CVE-2026-9832 | PG Payment Gateway of Stripe for WooCommerce themehigh | 5.3 | Sep 19 | Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint |
| CVE-2026-14955 | CF Checkout Field Editor for WooCommerce (Pro) Themehigh | 6.5 | Jul 25 | Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter |
| CVE-2026-45217 | SP Stripe Payment Gateway for WooCommerce ThemeHigh | 6.5 | May 25 | WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability |
| CVE-2026-3231 | CF Checkout Field Editor (Checkout Manager) for WooCommerce themehigh | 7.2 | Mar 11 | Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field |
| CVE-2025-13974 | EC Email Customizer for WooCommerce | Drag and Drop Email Templates Builder themehigh | 4.4 | Jan 7 | Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content |
| CVE-2025-67556 | AF Advanced FAQ Manager ThemeHigh | 5.9 | Dec 9 | WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67553 | AF Advanced FAQ Manager ThemeHigh | 6.5 | Dec 9 | WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49077 | DP Dynamic Pricing and Discount Rules ThemeHigh | 4.3 | Jun 6 | WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-8499 | CF Checkout Field Editor (Checkout Manager) for WooCommerce themehigh | 6.1 | Oct 4 | Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice |
| CVE-2024-35658 | CF Checkout Field Editor for WooCommerce (Pro) ThemeHigh | 9.1 | Jun 10 | WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability |
| CVE-2024-32781 | EC Email Customizer for WooCommerce ThemeHigh | 7.5 | Apr 24 | WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability |
| CVE-2024-0705 | PG Payment Gateway of Stripe for WooCommerce themehigh | 7.5 | Jan 19 | Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection |
| CVE-2023-51545 | JM Job Manager & Career โ Manage job board listings, and recruitments ThemeHigh | 8.8 | Dec 29 | WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection |
| CVE-2023-5906 | JM Job Manager & Career Themehigh | 7.5 | Nov 27 | Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure |
| CVE-2023-3162 | PG Payment Gateway of Stripe for WooCommerce themehigh | 9.8 | Aug 31 | Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass |
| CVE-2022-3490 | CF Checkout Field Editor For Woocommerce Themehigh | 7.2 | Nov 28 | Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection |
| CVE-2022-0783 | MS Multiple Shipping Addresses For Woocommerce Themehigh | 9.8 | May 2 | Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi |
