Skip to content
OpenAdvisories

Vendor

ThemeHigh

18 known vulnerabilities.

Products

Checkout Field Editor for WooCommerce (Pro) 3 Payment Gateway of Stripe for WooCommerce 3 Advanced FAQ Manager 2 Checkout Field Editor (Checkout Manager) for WooCommerce 2 Job Manager & Career – Manage job board listings, and recruitments 1 WooCommerce Extra Product Options Pro 1 Extra Product Options For WooCommerce | Custom Product Addons and Fields 1 Stripe Payment Gateway for WooCommerce 1 Dynamic Pricing and Discount Rules 1 Email Customizer for WooCommerce (Pro) 1 Email Customizer for WooCommerce 1 Email Customizer for WooCommerce | Drag and Drop Email Templates Builder 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2026-81534

    Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter

    The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows use…

    ThemeHigh Email Customizer for WooCommerce (Pro) Web / CMS
  • High 7.2
    CVE-2026-102392

    WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

    Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.

    ThemeHigh Extra Product Options For WooCommerce | Custom Product Addons and Fields Web / CMS
  • High 7.2
    CVE-2026-3231

    Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field

    The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, an…

    ThemeHigh Checkout Field Editor (Checkout Manager) for WooCommerce Web / CMS
  • High 8.6
    CVE-2024-35658

    WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro)…

    ThemeHigh Checkout Field Editor for WooCommerce (Pro) Web / CMS
  • High 7.5
    CVE-2024-32781

    WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0.

    ThemeHigh Email Customizer for WooCommerce Web / CMS