Log in Start free

VillaTheme

Products

ProductCVEsExploitedLatest
CURCY5–Oct 5, 2026
Photo Reviews for WooCommerce5–Oct 26, 2026
HAPPY5–May 21, 2026
Thank You Page Customizer for WooCommerce – Increase Your Sales4–Feb 27, 2024
Thank You Page Customizer for WooCommerce4–Oct 10, 2026
Abandoned Cart Recovery for WooCommerce3–Jul 13, 2026
Bopo – WooCommerce Product Bundle Builder3–Oct 26, 2026
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x3–Jul 3, 2026
Email Template Customizer for WooCommerce3–Oct 14, 2026
GIFT4U3–Oct 10, 2026
WPBulky3–Aug 28, 2026
WooCommerce Photo Reviews2–Feb 26, 2026
CURCY - WooCommerce Multi Currency - Currency Switcher2–Mar 7, 2025
Salevo2–Oct 14, 2026
Cart All In One For WooCommerce2–Feb 18, 2026
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce2–Oct 10, 2026
BuildKit – Product Builder for WooCommerce – Custom PC Builder2–Oct 5, 2026
AFFI – Affiliate Marketing for WooCommerce2–Oct 10, 2026
Lookzy1–Oct 5, 2026
Lucky Wheel for WooCommerce – Spin a Sale1–Dec 30, 2025
Lucky Wheel Giveaway1–Feb 11, 2026
Notivo1–Sep 30, 2026
Orders Tracking for WooCommerce1–May 10, 2024
Product Size Chart For WooCommerce1–Dec 18, 2023
Product Variations Swatches for WooCommerce1–Sep 3, 2026
Revopic – Photo Reviews for WooCommerce1–Oct 31, 2026
S2W – Import Shopify to WooCommerce (WordPress plugin)1–Nov 18, 2022
Sales Countdown Timer for WooCommerce and WordPress1–Feb 19, 2026
Suggestion Engine for WooCommerce1–Aug 27, 2026
Advanced Product Information for WooCommerce1–Jan 9, 2025
TMDS1–Oct 12, 2026
VillaTheme Core1–Oct 8, 2026
COMPE1–Apr 15, 2026
W2S – Migrate WooCommerce to Shopify1–Jan 30, 2025
CURCY – Multi Currency for WooCommerce1–Dec 21, 2023
Customer Coupons for WooCommerce1–Oct 26, 2026
DEPART1–Oct 26, 2026
WooCommerce Photo Reviews Premium1–Sep 11, 2024
HANDMADE – Dropshipping for Etsy and WooCommerce1–Oct 29, 2026
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin)1–Oct 14, 2022
HAPPY – Helpdesk Support Ticket System1–Dec 13, 2025

Exploited and recent CVEs

  • CVE-2026-110251 Medium 5.4 Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter 0.3%
  • CVE-2026-112827 High 7.1 WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-111404 Low 3.7 WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability 0.2%
  • CVE-2026-112839 Medium 4.3 WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110377 Medium 5.3 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110376 Medium 4.3 WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103081 High 7.5 WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability 0.3%
  • CVE-2026-103358 High 7.5 WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability 0.3%
  • CVE-2026-103080 Medium 5.3 WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103356 Medium 5.4 WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103685 Medium 4.3 WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-104398 Critical 9.8 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-103071 High 7.5 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability 0.2%
  • CVE-2026-103357 Medium 6.9 WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability 0.3%
  • CVE-2026-100161 High 7.2 Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter 0.3%
  • CVE-2026-103072 Medium 4.3 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97275 Medium 5.3 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability 0.2%
  • CVE-2026-100515 High 7.1 WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-102383 Medium 6.5 WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97071 Medium 5.3 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability 0.2%
  • CVE-2026-101923 High 8.1 Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter 0.3%
  • CVE-2026-100517 High 7.5 WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-102379 High 8.5 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability 0.2%
  • CVE-2026-102390 Medium 5.3 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerability 0.2%
  • CVE-2026-94171 High 7.1 WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-97261 Medium 5.3 WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-81786 High 7.5 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability 0.4%
  • CVE-2026-81282 Medium 6.5 WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-82227 High 8.5 WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability 0.4%
  • CVE-2026-81277 High 8.5 WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability 0.4%