Vulnerabilidades en VillaTheme
80 resultadosCVE-2026-103357MEDIUMWordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-100161HIGHPhoto Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' ParameterEPSS 0.3%CVE-2025-68550HIGHWordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57352MEDIUMWordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2022-46812MEDIUMWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-14581MEDIUMHAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket ReplyEPSS 0.3%CVE-2025-66528MEDIUMWordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57422HIGHWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-102383MEDIUMWordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103071HIGHWordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerabilityEPSS 0.2%CVE-2026-112827HIGHWordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-47570HIGHWordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-54809CRITICALWordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-121775MEDIUMWordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-110377MEDIUMWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-122663MEDIUMWordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-53571MEDIUMWordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2022-46810MEDIUMWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-28132MEDIUMWordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerabilityEPSS 0.2%CVE-2026-81282MEDIUMWordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%