Login Request a demo
VI
Vendor
VillaTheme
45 products with CVEs on record
85
CVEs
0
On KEV
25
New 30D
Products
PR
Photo Reviews for WooCommerce
villatheme
8.1
5 CVEs0 on KEV5 new
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
9.8
2 CVEs0 on KEV2 new
GI
GIFT4U
VillaTheme
9.3
3 CVEs0 on KEV1 new
CU
CURCY
villatheme
7.1
6 CVEs0 on KEV2 new
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
8.5
2 CVEs0 on KEV2 new
SA
Salevo
VillaTheme
7.5
2 CVEs0 on KEV2 new
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
4 CVEs0 on KEV1 new
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
7.1
3 CVEs0 on KEV1 new
ET
Email Template Customizer for WooCommerce
VillaTheme
7.5
3 CVEs0 on KEV1 new
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.8
2 CVEs0 on KEV1 new
CC
Customer Coupons for WooCommerce
VillaTheme
4.3
1 CVEs0 on KEV1 new
DE
DEPART
VillaTheme
4.3
1 CVEs0 on KEV1 new
HD
HANDMADE – Dropshipping for Etsy and WooCommerce
VillaTheme
7.1
1 CVEs0 on KEV1 new
LO
Lookzy
VillaTheme
6.5
1 CVEs0 on KEV1 new
NO
Notivo
VillaTheme
5.3
1 CVEs0 on KEV1 new
TM
TMDS
VillaTheme
5.4
1 CVEs0 on KEV1 new
VC
VillaTheme Core
VillaTheme
4.3
1 CVEs0 on KEV1 new
HA
HAPPY
VillaTheme
10.0
5 CVEs0 on KEV0 new
WT
Woocommerce Thank You Page Customizer
Villatheme
8.8
4 CVEs0 on KEV0 new
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
7.1
3 CVEs0 on KEV0 new
OT
Orders Tracking for WooCommerce
villatheme
6.5
3 CVEs0 on KEV0 new
WP
WooCommerce Photo Reviews
villatheme
9.8
3 CVEs0 on KEV0 new
WP
WPBulky
VillaTheme
8.5
3 CVEs0 on KEV0 new
CA
Cart All In One For WooCommerce
villatheme
7.2
2 CVEs0 on KEV0 new
CM
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
villatheme
7.3
2 CVEs0 on KEV0 new
TY
Thank You Page Customizer for WooCommerce – Increase Your Sales
villatheme
5.4
2 CVEs0 on KEV0 new
AP
Advanced Product Information for WooCommerce
VillaTheme
6.5
1 CVEs0 on KEV0 new
AA
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin)
Villatheme
7.5
1 CVEs0 on KEV0 new
CO
COMPE
VillaTheme
5.3
1 CVEs0 on KEV0 new
CW
CURCY - WooCommerce Multi Currency - Currency Switcher
villatheme
7.5
1 CVEs0 on KEV0 new
DA
Dropshipping And Fulfillment For Aliexpress And Woocommerce
Villatheme
7.5
1 CVEs0 on KEV0 new
EX
Exmage
Villatheme
7.2
1 CVEs0 on KEV0 new
HH
HAPPY – Helpdesk Support Ticket System
villatheme
4.3
1 CVEs0 on KEV0 new
LW
Lucky Wheel for WooCommerce – Spin a Sale
villatheme
7.2
1 CVEs0 on KEV0 new
LW
Lucky Wheel Giveaway
villatheme
7.2
1 CVEs0 on KEV0 new
PS
Product Size Chart For Woocommerce
Villatheme
8.8
1 CVEs0 on KEV0 new
PV
Product Variations Swatches for WooCommerce
VillaTheme
6.5
1 CVEs0 on KEV0 new
SI
S2w - Import Shopify TO Woocommerce
Villatheme
4.9
1 CVEs0 on KEV0 new
SC
Sales Countdown Timer for WooCommerce and WordPress
villatheme
7.5
1 CVEs0 on KEV0 new
SE
Suggestion Engine for WooCommerce
VillaTheme
8.5
1 CVEs0 on KEV0 new
W2
W2s
Villatheme
6.5
1 CVEs0 on KEV0 new
WM
W2S – Migrate WooCommerce to Shopify
villatheme
6.5
1 CVEs0 on KEV0 new
WE
Woocommerce Email Template Customizer
Villatheme
4.8
1 CVEs0 on KEV0 new
WM
Woocommerce Multi Currency
Villatheme
6.5
1 CVEs0 on KEV0 new
WP
WooCommerce Photo Reviews Premium
villatheme
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112827
New
HD
HANDMADE – Dropshipping for Etsy and WooCommerce
VillaTheme
7.1–Oct 29WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-111404
New
PR
Photo Reviews for WooCommerce
VillaTheme
3.7
0%
Oct 26WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability
CVE-2026-112839
New
CC
Customer Coupons for WooCommerce
VillaTheme
4.3
0%
Oct 26WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
CVE-2026-110377
New
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
5.3
0%
Oct 26WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2026-110376
New
DE
DEPART
VillaTheme
4.3
0%
Oct 26WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-103081
SA
Salevo
VillaTheme
7.5
0%
Oct 14WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability
CVE-2026-103358
ET
Email Template Customizer for WooCommerce
VillaTheme
7.5
0%
Oct 14WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability
CVE-2026-103080
SA
Salevo
VillaTheme
5.3
0%
Oct 12WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-103356
TM
TMDS
VillaTheme
5.4
0%
Oct 12WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
CVE-2026-103685
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.3
0%
Oct 10WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability
CVE-2026-104398
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
9.8
0%
Oct 10WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
CVE-2026-103071
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
0%
Oct 10WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
CVE-2026-103357
GI
GIFT4U
VillaTheme
6.9
0%
Oct 10WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-100161
PR
Photo Reviews for WooCommerce
villatheme
7.2
0%
Oct 10Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter
CVE-2026-103072
VC
VillaTheme Core
VillaTheme
4.3
0%
Oct 8WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
CVE-2026-97275
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
5.3
0%
Oct 5WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability
CVE-2026-100515
PR
Photo Reviews for WooCommerce
VillaTheme
7.1
0%
Oct 5WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102383
LO
Lookzy
VillaTheme
6.5
0%
Oct 5WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability
CVE-2026-97071
CU
CURCY
VillaTheme
5.3
0%
Oct 5WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
CVE-2026-101923
PR
Photo Reviews for WooCommerce
villatheme
8.1
0%
Oct 3Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
CVE-2026-100517
PR
Photo Reviews for WooCommerce
VillaTheme
7.5
0%
Oct 1WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-102379
BP
BuildKit – Product Builder for WooCommerce – Custom PC Builder
VillaTheme
8.5
0%
Oct 1WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability
CVE-2026-102390
AA
AFFI – Affiliate Marketing for WooCommerce
VillaTheme
5.3
0%
Oct 1WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerability
CVE-2026-94171
CU
CURCY
VillaTheme
7.1
0%
Sep 30WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97261
NO
Notivo
VillaTheme
5.3
0%
Sep 30WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
CVE-2026-81786
TY
Thank You Page Customizer for WooCommerce
VillaTheme
7.5
0%
Sep 10WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-81282
PV
Product Variations Swatches for WooCommerce
VillaTheme
6.5
0%
Sep 3WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82227
WP
WPBulky
VillaTheme
8.5
0%
Aug 28WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability
CVE-2026-81277
SE
Suggestion Engine for WooCommerce
VillaTheme
8.5
0%
Aug 27WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability
CVE-2026-57698
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
6.5
0%
Jul 13WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability
CVE-2026-57422
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
7.1
0%
Jul 13WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-11778
CM
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
villatheme
5.4
0%
Jul 3CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
CVE-2026-57352
AD
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
VillaTheme
4.8
0%
Jul 2WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability
CVE-2026-57664
BW
Bopo – WooCommerce Product Bundle Builder
VillaTheme
4.3
0%
Jun 26WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability
CVE-2026-57324
GI
GIFT4U
VillaTheme
6.5
0%
Jun 26WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-54809
GI
GIFT4U
VillaTheme
9.3
0%
Jun 17WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
CVE-2026-39593
HA
HAPPY
VillaTheme
6.5
0%
May 21WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-40737
CO
COMPE
VillaTheme
5.3
0%
Apr 15WordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32526
AC
Abandoned Cart Recovery for WooCommerce
VillaTheme
7.1
0%
Mar 25WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28132
WP
WooCommerce Photo Reviews
villatheme
5.3
0%
Feb 26WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability
CVE-2025-67977
HA
HAPPY
VillaTheme
8.2
0%
Feb 20WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability
CVE-2026-27052
SC
Sales Countdown Timer for WooCommerce and WordPress
villatheme
7.5
0%
Feb 19WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
CVE-2026-2019
CA
Cart All In One For WooCommerce
villatheme
7.2
1%
Feb 18Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting
CVE-2025-14541
LW
Lucky Wheel Giveaway
villatheme
7.2
1%
Feb 11Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
CVE-2025-14509
LW
Lucky Wheel for WooCommerce – Spin a Sale
villatheme
7.2
1%
Dec 30Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags
CVE-2025-68550
WP
WPBulky
VillaTheme
7.6
0%
Dec 23WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability
CVE-2025-68556
HA
HAPPY
VillaTheme
5.3
0%
Dec 23WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability
CVE-2025-14581
HH
HAPPY – Helpdesk Support Ticket System
villatheme
4.3
0%
Dec 13HAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply
CVE-2025-66528
TY
Thank You Page Customizer for WooCommerce
VillaTheme
4.3
0%
Dec 9WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability
CVE-2025-49372
HA
HAPPY
VillaTheme
10.0
0%
Nov 6WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability
CVE-2025-64200
ET
Email Template Customizer for WooCommerce
VillaTheme
5.9
0%
Oct 29WordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerability
CVE-2025-47570
WP
WooCommerce Photo Reviews
villatheme
7.1
0%
Sep 9WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53571
HA
HAPPY
VillaTheme
6.5
0%
Sep 5WordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2025-30993
TY
Thank You Page Customizer for WooCommerce
VillaTheme
6.5
0%
Aug 14WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control Vulnerability
CVE-2025-47563
CU
CURCY
villatheme
5.3
0%
May 16WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability
CVE-2024-13320
CW
CURCY - WooCommerce Multi Currency - Currency Switcher
villatheme
7.5
0%
Mar 7CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection
CVE-2024-13487
CM
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
villatheme
7.3
1%
Feb 6CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
CVE-2024-12861
WM
W2S – Migrate WooCommerce to Shopify
villatheme
6.5
0%
Jan 30W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
CVE-2025-22803
AP
Advanced Product Information for WooCommerce
VillaTheme
6.5
0%
Jan 9WordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2022-46796
CU
CURCY
VillaTheme
6.5
1%
Dec 13WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability