Login Request a demo
VI
Vendor
VillaTheme
40 products with CVEs on record
70
CVEs
0
On KEV
24
New 30D
Products
PR
Photo Reviews for WooCommerce
villatheme
8.1
5 CVEs0 on KEV5 new
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
9.8
2 CVEs0 on KEV2 new
GI
GIFT4U
VillaTheme
9.3
3 CVEs0 on KEV1 new
CU
CURCY
VillaTheme
7.1
3 CVEs0 on KEV2 new
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
8.5
2 CVEs0 on KEV2 new
SA
Salevo
VillaTheme
7.5
2 CVEs0 on KEV2 new
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
7.1
3 CVEs0 on KEV1 new
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
3 CVEs0 on KEV1 new
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.8
2 CVEs0 on KEV1 new
ET
Email Template Customizer for WooCommerce
VillaTheme
7.5
2 CVEs0 on KEV1 new
CC
Customer Coupons for WooCommerce
VillaTheme
4.3
1 CVEs0 on KEV1 new
DE
DEPART
VillaTheme
4.3
1 CVEs0 on KEV1 new
LO
Lookzy
VillaTheme
6.5
1 CVEs0 on KEV1 new
NO
Notivo
VillaTheme
5.3
1 CVEs0 on KEV1 new
TM
TMDS
VillaTheme
5.4
1 CVEs0 on KEV1 new
VC
VillaTheme Core
VillaTheme
4.3
1 CVEs0 on KEV1 new
HA
HAPPY
VillaTheme
10.0
4 CVEs0 on KEV0 new
WT
Woocommerce Thank You Page Customizer
Villatheme
8.8
4 CVEs0 on KEV0 new
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
7.1
3 CVEs0 on KEV0 new
WP
WPBulky
VillaTheme
8.5
3 CVEs0 on KEV0 new
CA
Cart All In One For WooCommerce
villatheme
7.2
2 CVEs0 on KEV0 new
OT
Orders Tracking For Woocommerce
Villatheme
6.1
2 CVEs0 on KEV0 new
WP
WooCommerce Photo Reviews
villatheme
9.8
2 CVEs0 on KEV0 new
AP
Advanced Product Information for WooCommerce
VillaTheme
6.5
1 CVEs0 on KEV0 new
AA
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin)
Villatheme
7.5
1 CVEs0 on KEV0 new
CO
COMPE
VillaTheme
5.3
1 CVEs0 on KEV0 new
CM
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
villatheme
5.4
1 CVEs0 on KEV0 new
DA
Dropshipping And Fulfillment For Aliexpress And Woocommerce
Villatheme
7.5
1 CVEs0 on KEV0 new
EX
Exmage
Villatheme
7.2
1 CVEs0 on KEV0 new
HH
HAPPY – Helpdesk Support Ticket System
villatheme
4.3
1 CVEs0 on KEV0 new
LW
Lucky Wheel for WooCommerce – Spin a Sale
villatheme
7.2
1 CVEs0 on KEV0 new
LW
Lucky Wheel Giveaway
villatheme
7.2
1 CVEs0 on KEV0 new
PS
Product Size Chart For Woocommerce
Villatheme
8.8
1 CVEs0 on KEV0 new
PV
Product Variations Swatches for WooCommerce
VillaTheme
6.5
1 CVEs0 on KEV0 new
SI
S2w - Import Shopify TO Woocommerce
Villatheme
4.9
1 CVEs0 on KEV0 new
SC
Sales Countdown Timer for WooCommerce and WordPress
villatheme
7.5
1 CVEs0 on KEV0 new
SE
Suggestion Engine for WooCommerce
VillaTheme
8.5
1 CVEs0 on KEV0 new
W2
W2s
Villatheme
6.5
1 CVEs0 on KEV0 new
WE
Woocommerce Email Template Customizer
Villatheme
4.8
1 CVEs0 on KEV0 new
WM
Woocommerce Multi Currency
Villatheme
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111404
New
PR
Photo Reviews for WooCommerce
VillaTheme
3.7
0%
Oct 26WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability
CVE-2026-112839
New
CC
Customer Coupons for WooCommerce
VillaTheme
4.3
0%
Oct 26WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
CVE-2026-110377
New
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
5.3
0%
Oct 26WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2026-110376
New
DE
DEPART
VillaTheme
4.3
0%
Oct 26WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-103081
SA
Salevo
VillaTheme
7.5
0%
Oct 14WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability
CVE-2026-103358
ET
Email Template Customizer for WooCommerce
VillaTheme
7.5
0%
Oct 14WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability
CVE-2026-103080
SA
Salevo
VillaTheme
5.3
0%
Oct 12WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-103356
TM
TMDS
VillaTheme
5.4
0%
Oct 12WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
CVE-2026-103685
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.3
0%
Oct 10WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability
CVE-2026-104398
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
9.8
0%
Oct 10WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
CVE-2026-103071
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
0%
Oct 10WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
CVE-2026-103357
GI
GIFT4U
VillaTheme
6.9
0%
Oct 10WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-100161
PR
Photo Reviews for WooCommerce
villatheme
7.2
0%
Oct 10Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter
CVE-2026-103072
VC
VillaTheme Core
VillaTheme
4.3
0%
Oct 8WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
CVE-2026-97275
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
5.3
0%
Oct 5WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability
CVE-2026-100515
PR
Photo Reviews for WooCommerce
VillaTheme
7.1
0%
Oct 5WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102383
LO
Lookzy
VillaTheme
6.5
0%
Oct 5WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability
CVE-2026-97071
CU
CURCY
VillaTheme
5.3
0%
Oct 5WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
CVE-2026-101923
PR
Photo Reviews for WooCommerce
villatheme
8.1
0%
Oct 3Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
CVE-2026-100517
PR
Photo Reviews for WooCommerce
VillaTheme
7.5
0%
Oct 1WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-102379
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
8.5
0%
Oct 1WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability
CVE-2026-102390
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
5.3
0%
Oct 1WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerability
CVE-2026-94171
CU
CURCY
VillaTheme
7.1
0%
Sep 30WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97261
NO
Notivo
VillaTheme
5.3
0%
Sep 30WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
CVE-2026-81786
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
0%
Sep 10WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-81282
PV
Product Variations Swatches for WooCommerce
VillaTheme
6.5
0%
Sep 3WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82227
WP
WPBulky
VillaTheme
8.5
0%
Aug 28WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability
CVE-2026-81277
SE
Suggestion Engine for WooCommerce
VillaTheme
8.5
0%
Aug 27WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability
CVE-2026-57698
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
6.5
0%
Jul 13WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability
CVE-2026-57422
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
7.1
0%
Jul 13WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-11778
CM
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
villatheme
5.4
0%
Jul 3CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
CVE-2026-57352
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.8
0%
Jul 2WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability
CVE-2026-57664
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
4.3
0%
Jun 26WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability
CVE-2026-57324
GI
GIFT4U
VillaTheme
6.5
0%
Jun 26WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-54809
GI
GIFT4U
VillaTheme
9.3
0%
Jun 17WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
CVE-2026-39593
HA
HAPPY
VillaTheme
6.5
0%
May 21WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-40737
CO
COMPE
VillaTheme
5.3
0%
Apr 15WordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32526
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
7.1
0%
Mar 25WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28132
WP
WooCommerce Photo Reviews
villatheme
5.3
0%
Feb 26WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability
CVE-2025-67977
HA
HAPPY
VillaTheme
8.2
0%
Feb 20WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability
CVE-2026-27052
SC
Sales Countdown Timer for WooCommerce and WordPress
villatheme
7.5
0%
Feb 19WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
CVE-2026-2019
CA
Cart All In One For WooCommerce
villatheme
7.2
1%
Feb 18Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting
CVE-2025-14541
LW
Lucky Wheel Giveaway
villatheme
7.2
1%
Feb 11Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
CVE-2025-14509
LW
Lucky Wheel for WooCommerce – Spin a Sale
villatheme
7.2
1%
Dec 30Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags
CVE-2025-68550
WP
WPBulky
VillaTheme
7.6
0%
Dec 23WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability
CVE-2025-68556
HA
HAPPY
VillaTheme
5.3
0%
Dec 23WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability
CVE-2025-14581
HH
HAPPY – Helpdesk Support Ticket System
villatheme
4.3
0%
Dec 13HAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply
CVE-2025-66528
TY
Thank You Page Customizer for WooCommerce
VillaTheme
4.3
0%
Dec 9WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability
CVE-2025-49372
HA
HAPPY
VillaTheme
10.0
0%
Nov 6WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability
CVE-2025-64200
ET
Email Template Customizer for WooCommerce
VillaTheme
5.9
0%
Oct 29WordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12861
W2
W2s
Villatheme
6.5
0%
Jan 30The W2S – Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.2.1 via the 'viw2s_view_log' AJAX action
CVE-2025-22803
AP
Advanced Product Information for WooCommerce
VillaTheme
6.5
0%
Jan 9WordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49288
WE
Woocommerce Email Template Customizer
Villatheme
4.8
0%
Oct 17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Email Template Customizer for WooCommerce…
CVE-2024-8277
WP
Woocommerce Photo Reviews
Villatheme
9.8
2%
Sep 11The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2
CVE-2024-1687
WT
Woocommerce Thank You Page Customizer
Villatheme
5.4
0%
Feb 27The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on…
CVE-2024-1686
WT
Woocommerce Thank You Page Customizer
Villatheme
4.3
0%
Feb 27The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via…
CVE-2023-50831
CU
Curcy
Villatheme
5.4
1%
Dec 21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This…
CVE-2023-48778
PS
Product Size Chart For Woocommerce
Villatheme
8.8
0%
Dec 18Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5
CVE-2023-4216
OT
Orders Tracking For Woocommerce
Villatheme
2.7
1%
Sep 4The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege users with the…
CVE-2023-30482
WP
Wpbulky
Villatheme
5.4
0%
Aug 8Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <= 1.0.10 versions