Vulnerabilities in VillaTheme

80 results
CVE-2025-68556MEDIUMWordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2022-46806MEDIUMWordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-22803MEDIUMWordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-40737MEDIUMWordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-102379HIGHWordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-111404LOWWordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerabilityEPSS 0.2%CVE-2026-112839MEDIUMWordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103072MEDIUMWordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97261MEDIUMWordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-97275MEDIUMWordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-97071MEDIUMWordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-100515HIGHWordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-103685MEDIUMWordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32526HIGHWordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64200MEDIUMWordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-103080MEDIUMWordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-102390MEDIUMWordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103356MEDIUMWordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-110376MEDIUMWordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-94171HIGHWordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%