Skip to content

Themehigh vulnerabilities

Products

Newest

themehigh woocommerce extra product options pro WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' Parameter CVE-2026-104926 6.1 MediumOctober 31, 2026
themehigh email customizer for woocommerce (pro) Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter CVE-2026-81534 8.8 HighOctober 15, 2026
themehigh extra product options for woocommerce | custom product addons and fields WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability CVE-2026-102392 7.2 HighSeptember 30, 2026
themehigh payment gateway of stripe for woocommerce Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint CVE-2026-9832 5.3 MediumSeptember 19, 2026
themehigh checkout field editor for woocommerce (pro) Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter CVE-2026-14955 6.5 MediumJuly 25, 2026
themehigh stripe payment gateway for woocommerce WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability CVE-2026-45217 6.5 MediumMay 25, 2026
themehigh checkout field editor (checkout manager) for woocommerce Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field CVE-2026-3231 7.2 HighMarch 11, 2026
themehigh email customizer for woocommerce | drag and drop email templates builder Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content CVE-2025-13974 4.4 MediumJanuary 7, 2026
themehigh advanced faq manager WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-67556 5.9 MediumDecember 9, 2025
themehigh advanced faq manager WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-67553 6.5 MediumDecember 9, 2025
themehigh dynamic pricing and discount rules WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-49077 4.3 MediumJune 6, 2025
themehigh checkout field editor (checkout manager) for woocommerce, checkout field editor for woocommerce +1 more Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice CVE-2024-8499 4.7 MediumOctober 4, 2024
themehigh checkout field editor for woocommerce (pro), checkout field editor for woocommerce +1 more WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability CVE-2024-35658 8.6 HighJune 10, 2024
themehigh email customizer for woocommerce WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability CVE-2024-32781 7.5 HighApril 24, 2024
webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 more Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection CVE-2024-0705 9.8 CriticalJanuary 19, 2024
themehigh job manager & career – manage job board listings, and recruitments, job manager \& career +1 more WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection CVE-2023-51545 9.6 CriticalDecember 29, 2023
unknown job manager & career, themehigh job manager \& career +1 more Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure CVE-2023-5906 7.5 HighNovember 27, 2023
webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 more Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass CVE-2023-3162 9.8 CriticalAugust 31, 2023
themehigh checkout field editor (checkout manager) for woocommerce, checkout field editor for woocommerce +1 more Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection CVE-2022-3490 7.2 HighNovember 28, 2022
unknown multiple shipping address woocommerce, themehigh multiple shipping addresses for woocommerce +1 more Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi CVE-2022-0783 9.8 CriticalMay 2, 2022