Log in Start free

ThemeHigh

Products

ProductCVEsExploitedLatest
Payment Gateway of Stripe for WooCommerce3–Sep 19, 2026
Checkout Field Editor for WooCommerce (Pro)2–Jul 25, 2026
Checkout Field Editor (Checkout Manager) for WooCommerce2–Mar 11, 2026
Advanced FAQ Manager2–Dec 9, 2025
Email Customizer for WooCommerce (Pro)1–Oct 15, 2026
Extra Product Options For WooCommerce | Custom Product Addons and Fields1–Sep 30, 2026
Job Manager & Career – Manage job board listings, and recruitments1–Dec 29, 2023
Stripe Payment Gateway for WooCommerce1–May 25, 2026
WooCommerce Extra Product Options Pro1–Oct 31, 2026
Dynamic Pricing and Discount Rules1–Jun 6, 2025
Email Customizer for WooCommerce1–Apr 24, 2024
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder1–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2026-104926 Medium 6.1 WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' Parameter 0.3%
  • CVE-2026-81534 High 8.8 Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter 0.5%
  • CVE-2026-102392 High 7.2 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-9832 Medium 5.3 Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint 0.6%
  • CVE-2026-14955 Medium 6.5 Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter 0.8%
  • CVE-2026-45217 Medium 6.5 WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability 0.4%
  • CVE-2026-3231 High 7.2 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field 0.4%
  • CVE-2025-13974 Medium 4.4 Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content 0.3%
  • CVE-2025-67556 Medium 5.9 WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67553 Medium 6.5 WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49077 Medium 4.3 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2024-8499 Medium 4.7 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice 0.5%
  • CVE-2024-35658 High 8.6 WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability 0.6%
  • CVE-2024-32781 High 7.5 WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability 0.7%
  • CVE-2024-0705 Critical 9.8 Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection 2.6%
  • CVE-2023-51545 Critical 9.6 WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection 0.3%
  • CVE-2023-3162 Critical 9.8 Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass 1.2%