TH
Vendor
themelocation
6
CVEs
0
On KEV
0
New 30D
Products
CW6.1
Custom WooCommerce Checkout Fields Editor
themelocation
2 CVEs0 on KEV0 new
RA8.8
Remove Add to Cart WooCommerce
themelocation
2 CVEs0 on KEV0 new
WF5.4
Widgets For Woocommerce Products ON Elementor
Themelocation
1 CVEs0 on KEV0 new
WP6.4
WP Popup Magic
themelocation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13362 | CW Custom WooCommerce Checkout Fields Editor themelocation | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-13900 | WP WP Popup Magic themelocation | 6.4 | Jan 9 | WP Popup Magic <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute |
| CVE-2024-1697 | CW Custom Woocommerce Checkout Fields Editor Themelocation | 5.4 | Mar 23 | The Custom WooCommerce Checkout Fields Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the save_wcfe_options function in all versions up to, and… |
| CVE-2023-46629 | RA Remove Add TO Cart Woocommerce Themelocation | 8.8 | Nov 13 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <= 1.4.4 |
| CVE-2022-4661 | WF Widgets For Woocommerce Products ON Elementor Themelocation | 5.4 | Mar 13 | The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a… |