Skip to contentVillatheme vulnerabilities
Newest
- villatheme happy – helpdesk support ticket systemHAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket ReplyCVE-2025-145814.3 Medium
- villatheme thank you page customizer for woocommerceWordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerabilityCVE-2025-665284.3 Medium
- villatheme happyWordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerabilityCVE-2025-4937210.0 Critical
- villatheme email template customizer for woocommerceWordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-642005.9 Medium
- villatheme woocommerce photo reviewsWordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-475707.1 High
- villatheme happyWordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerabilityCVE-2025-535716.5 Medium
- villatheme thank you page customizer for woocommerceWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control VulnerabilityCVE-2025-309936.5 Medium
- villatheme curcyWordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerabilityCVE-2025-475635.3 Medium
- villatheme curcy - woocommerce multi currency - currency switcherCURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL InjectionCVE-2024-133207.5 High
- villatheme curcy – multi currency for woocommerce – smoothly on woocommerce 9.xCURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price FunctionCVE-2024-134877.3 High
- villatheme w2s, w2s – migrate woocommerce to shopify +1 moreW2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File ReadCVE-2024-128616.5 Medium
- villatheme advanced product information for woocommerceWordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-228036.5 Medium
- villatheme curcyWordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerabilityCVE-2022-467966.5 Medium
- villatheme curcyWordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-492837.1 High
- villatheme email template customizer for woocommerce, woocommerce email template customizer +1 moreWordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-492885.9 Medium
- villatheme woocommerce photo reviews premium, woocommerce photo reviews +1 moreWooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege EscalationCVE-2024-82779.8 Critical
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-40396.5 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreThank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode ExecutionCVE-2024-16875.4 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreThank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data ExportCVE-2024-16864.3 Medium
- villatheme curcy, curcy – multi currency for woocommerce +1 moreWordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508316.5 Medium
- villatheme product size chart for woocommerceWordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-487785.4 Medium
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/ReadCVE-2023-42162.7 Low
- villatheme wpbulkyWordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)CVE-2023-304826.5 Medium
- villatheme abandoned cart recovery for woocommerceAbandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery BypassCVE-2021-43954.3 Medium
- villatheme woocommerce multi currency, curcy - woocommerce multi currency - currency switcher +1 moreWooCommerce Multi Currency <= 2.1.17 - Missing AuthorizationCVE-2021-43796.5 Medium
- palscode woocommerce multi currency, villatheme curcy – multi currency for woocommerce – smoothly on woocommerce 9.x +1 moreWooCommerce Multi Currency <= 2.1.17 - Missing AuthorizationCVE-2021-43764.3 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-468104.3 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-468124.3 Medium
- villatheme cart all in one for woocommerceWordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-468065.4 Medium
- villatheme s2w – import shopify to woocommerce (wordpress plugin), s2w - import shopify to woocommerce +1 moreWordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerabilityCVE-2022-446344.9 Medium
- villatheme ald - aliexpress dropshipping and fulfillment for woocommerce (wordpress plugin), dropshipping and fulfillment for aliexpress and woocommerce +1 moreWordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilityCVE-2022-416237.5 High
- villatheme exmage, unknown exmage – wordpress image links +1 moreEXMAGE < 1.0.7 - Admin+ Blind SSRFCVE-2022-10377.2 High
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site ScriptingCVE-2021-250626.1 Medium