ThemeLocation

Products

Product	CVEs	Exploited	Latest
Custom WooCommerce Checkout Fields Editor	6	–	May 1, 2026
Remove Add to Cart WooCommerce	2	–	May 1, 2026
Change Cart button Colors WooCommerce	1	–	Jun 20, 2025
Woo Products Widgets For Elementor	1	–	Aug 19, 2024
WP Popup Magic	1	–	Jan 9, 2026

CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
CVE-2025-13900 Medium 6.4 WP Popup Magic <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute 0.2%
CVE-2025-58799 Medium 4.3 WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
CVE-2025-52783 High 7.1 WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
CVE-2024-43271 High 8.5 WordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.0 - Local File Inclusion vulnerability 0.6%
CVE-2024-33956 Medium 4.3 WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability 0.4%
CVE-2024-30518 Medium 4.3 WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
CVE-2024-1697 Medium 6.4 Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.4%
CVE-2023-46629 Medium 4.3 WordPress Remove Add to Cart WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%