TH
Vendor
themelocation
12
CVEs
0
On KEV
0
New 30D
Products
CW6.3
Custom WooCommerce Checkout Fields Editor
themelocation
6 CVEs0 on KEV0 new
RA8.8
Remove Add to Cart WooCommerce
themelocation
2 CVEs0 on KEV0 new
CC7.1
Change Cart button Colors WooCommerce
themelocation
1 CVEs0 on KEV0 new
WF5.4
Widgets For Woocommerce Products ON Elementor
Themelocation
1 CVEs0 on KEV0 new
WP8.5
Woo Products Widgets For Elementor
Themelocation
1 CVEs0 on KEV0 new
WP6.4
WP Popup Magic
themelocation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13362 | CW Custom WooCommerce Checkout Fields Editor themelocation | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-13900 | WP WP Popup Magic themelocation | 6.4 | Jan 9 | WP Popup Magic <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute |
| CVE-2025-58799 | CW Custom WooCommerce Checkout Fields Editor themelocation | 4.3 | Sep 5 | WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-52783 | CC Change Cart button Colors WooCommerce themelocation | 7.1 | Jun 20 | WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2022-4974 | CW Custom WooCommerce Checkout Fields Editor themelocation | 6.3 | Oct 16 | Freemius SDK <= 2.4.2 - Missing Authorization Checks |
| CVE-2024-43271 | WP Woo Products Widgets For Elementor Themelocation | 8.5 | Aug 19 | WordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.0 - Local File Inclusion vulnerability |
| CVE-2024-33956 | CW Custom WooCommerce Checkout Fields Editor ThemeLocation | 4.3 | May 2 | WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability |
| CVE-2024-30518 | CW Custom WooCommerce Checkout Fields Editor ThemeLocation | 4.3 | Mar 29 | WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-1697 | CW Custom WooCommerce Checkout Fields Editor themelocation | 5.4 | Mar 23 | Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2023-46629 | RA Remove Add TO Cart Woocommerce Themelocation | 8.8 | Nov 13 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <= 1.4.4 |
| CVE-2022-4661 | WF Widgets For Woocommerce Products ON Elementor Themelocation | 5.4 | Mar 13 | The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a… |