VillaTheme Cart All In One For WooCommerce

• CVE-2026-2019 High 7.2 Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting 0.5%
• CVE-2022-46806 Medium 5.4 WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%