Vulnerabilidades en villatheme
52 resultadosAnálisis Vexday
A Villatheme apresenta um perfil de risco moderado com 19 CVEs catalogadas, sendo apenas 1 crítica e nenhuma sob exploração ativa no momento. A fraqueza dominante é CWE-862 (controle de acesso inadequado), que representa um risco estrutural em suas aplicações. O ritmo de descoberta é lento: apenas 1 vulnerabilidade nos últimos 90 dias, sugerindo um ecossistema menos dinâmico ou menos auditado.
CVE-2024-1687MEDIUMThank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2023-30482MEDIUMWordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-81277HIGHWordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-82227HIGHWordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-57698MEDIUMWordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2024-12861MEDIUMW2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File ReadEPSS 0.4%CVE-2026-40737MEDIUMWordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-39593MEDIUMWordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57324MEDIUMWordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-47563MEDIUMWordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerabilityEPSS 0.3%CVE-2026-28132MEDIUMWordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerabilityEPSS 0.3%CVE-2025-30993MEDIUMWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-49283HIGHWordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57664MEDIUMWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-67977HIGHWordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-48778MEDIUMWordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-68550HIGHWordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-49288MEDIUMWordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57352MEDIUMWordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2022-46812MEDIUMWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%