Skip to content
OpenAdvisories

Vendor

villatheme

84 known vulnerabilities.

Products

CURCY 8 HAPPY 5 Photo Reviews for WooCommerce 5 Thank You Page Customizer for WooCommerce – Increase Your Sales 4 Thank You Page Customizer for WooCommerce 4 CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x 3 WPBulky 3 AFFI – Affiliate Marketing for WooCommerce 3 GIFT4U 3 Abandoned Cart Recovery for WooCommerce 3 Bopo – WooCommerce Product Bundle Builder 3 Email Template Customizer for WooCommerce 3 ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce 2 Cart All In One For WooCommerce 2 BuildKit – Product Builder for WooCommerce – Custom PC Builder 2 Salevo 2 WooCommerce Photo Reviews 2 CURCY - WooCommerce Multi Currency - Currency Switcher 2 Catna – Woo Name Your Price and Offers 1 DEPART 1 VISeek 1 Product Size Chart For WooCommerce 1 Notivo 1 S2W – Import Shopify to WooCommerce (WordPress plugin) 1 ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) 1 Product Variations Swatches for WooCommerce 1 Lookzy 1 Advanced Product Information for WooCommerce 1 Sales Countdown Timer for WooCommerce and WordPress 1 Revopic – Photo Reviews for WooCommerce 1 Lucky Wheel for WooCommerce – Spin a Sale 1 TMDS 1 HAPPY – Helpdesk Support Ticket System 1 CURCY – Multi Currency for WooCommerce 1 Orders Tracking for WooCommerce 1 WooCommerce Photo Reviews Premium 1 Suggestion Engine for WooCommerce 1 Customer Coupons for WooCommerce 1 VillaTheme Core 1 COMPE 1
All Critical High Medium Low Exploited only Public exploit

51 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-1686

    Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export

    The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the apply_layout function due to a missing capability check. This makes it possib…

    villatheme Thank You Page Customizer for WooCommerce – Increase Your Sales Web / CMS
  • Medium 6.5
    CVE-2023-50831

    WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This issue affects CURCY – Multi Currency for WooCommerce: from n/a through 2.2.0.

    villatheme CURCY – Multi Currency for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2023-48778

    WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5.

    villatheme Product Size Chart For WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-30482

    WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <= 1.0.10 versions.

    villatheme WPBulky
  • Medium 4.3
    CVE-2021-4395

    Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass

    The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the get_items() and extra_tablenav() functions. This …

    villatheme Abandoned Cart Recovery for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2021-4379

    WooCommerce Multi Currency <= 2.1.17 - Missing Authorization

    The WooCommerce Multi Currency plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wmc_bulk_fixed_price function in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers, with…

    villatheme CURCY - WooCommerce Multi Currency - Currency Switcher Web / CMS
  • Medium 4.3
    CVE-2021-4376

    WooCommerce Multi Currency <= 2.1.17 - Missing Authorization

    The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers to change the price of a product to an arbitrary value.

    villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Web / CMS
  • Medium 4.3
    CVE-2022-46810

    WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions.

    villatheme Thank You Page Customizer for WooCommerce – Increase Your Sales Web / CMS
  • Medium 4.3
    CVE-2022-46812

    WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions.

    villatheme Thank You Page Customizer for WooCommerce – Increase Your Sales Web / CMS
  • Medium 5.4
    CVE-2022-46806

    WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification.

    villatheme Cart All In One For WooCommerce Web / CMS
  • Medium 4.9
    CVE-2022-44634

    WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability

    Auth. (admin+) Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin <= 1.1.12 on WordPress.

    villatheme S2W – Import Shopify to WooCommerce (WordPress plugin) Web / CMS