TH
Vendor
ThemeHigh
14 products with CVEs on record
22
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-81534
EC
Email Customizer for WooCommerce (Pro)
ThemeHigh
8.8
0%
Oct 15Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter
CVE-2026-102392
EP
Extra Product Options For WooCommerce | Custom Product Addons and Fields
ThemeHigh
7.2
0%
Sep 30WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
CVE-2026-9832
PG
Payment Gateway of Stripe for WooCommerce
themehigh
5.3
1%
Sep 19Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint
CVE-2026-14955
CF
Checkout Field Editor for WooCommerce (Pro)
Themehigh
6.5
1%
Jul 25Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter
CVE-2026-45217
SP
Stripe Payment Gateway for WooCommerce
ThemeHigh
6.5
0%
May 25WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability
CVE-2026-3231
CF
Checkout Field Editor (Checkout Manager) for WooCommerce
themehigh
7.2
0%
Mar 11Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field
CVE-2025-13974
EC
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder
themehigh
4.4
0%
Jan 7Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content
CVE-2025-67556
AF
Advanced FAQ Manager
ThemeHigh
5.9
0%
Dec 9WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67553
AF
Advanced FAQ Manager
ThemeHigh
6.5
0%
Dec 9WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49077
DP
Dynamic Pricing and Discount Rules
ThemeHigh
4.3
0%
Jun 6WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-8499
CF
Checkout Field Editor (Checkout Manager) for WooCommerce
themehigh
6.1
0%
Oct 4Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice
CVE-2024-35658
CF
Checkout Field Editor for WooCommerce (Pro)
ThemeHigh
9.1
1%
Jun 10WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability
CVE-2024-32781
EC
Email Customizer for WooCommerce
ThemeHigh
7.5
1%
Apr 24WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability
CVE-2024-0705
PG
Payment Gateway of Stripe for WooCommerce
themehigh
7.5
3%
Jan 19Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
CVE-2023-51545
JM
Job Manager & Career โ€“ Manage job board listings, and recruitments
ThemeHigh
8.8
0%
Dec 29WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection
CVE-2023-5906
JM
Job Manager & Career
Themehigh
7.5
1%
Nov 27Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure
CVE-2023-3162
PG
Payment Gateway of Stripe for WooCommerce
themehigh
9.8
1%
Aug 31Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
CVE-2022-3490
CF
Checkout Field Editor For Woocommerce
Themehigh
7.2
1%
Nov 28Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
CVE-2022-0783
MS
Multiple Shipping Addresses For Woocommerce
Themehigh
9.8
8%
May 2Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi