Skip to content
OpenAdvisories
High · 7.5 CVE-2026-103358 EUVD-2026-100987GHSA-fqh3-49hp-8c6j

WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability

Published Oct 14, 2026 · Updated Oct 15, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4.

Affected products

VendorProductAffectedFixed
VillaTheme Email Template Customizer for WooCommerce ≤ 1.3.4 —

References