Themelocation vulnerabilities

Products

• Custom Woocommerce Checkout Fields Editor 6
• Remove Add To Cart Woocommerce 3
• Widgets For Woocommerce Products On Elementor 2

Newest

• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• themelocation wp popup magic WP Popup Magic <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute CVE-2025-13900 6.4 MediumJanuary 9, 2026
• themelocation custom woocommerce checkout fields editor WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-58799 4.3 MediumSeptember 5, 2025
• themelocation change cart button colors woocommerce WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-52783 7.1 HighJune 20, 2025
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• themelocation widgets for woocommerce products on elementor, woo products widgets for elementor +1 more WordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.0 - Local File Inclusion vulnerability CVE-2024-43271 8.5 HighAugust 19, 2024
• themelocation custom woocommerce checkout fields editor WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability CVE-2024-33956 4.3 MediumMay 2, 2024
• themelocation custom woocommerce checkout fields editor WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30518 4.3 MediumMarch 29, 2024
• themelocation custom woocommerce checkout fields editor Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-1697 6.4 MediumMarch 23, 2024
• themelocation remove add to cart woocommerce WordPress Remove Add to Cart WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-46629 4.3 MediumNovember 13, 2023
• themelocation widgets for woocommerce products on elementor Woo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode CVE-2022-4661 5.4 MediumMarch 13, 2023