VillaTheme

Records83All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high30CVSS 7.0–8.9

Exploited now

VillaTheme records in CISA KEV

No VillaTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Thank You Page Customizer 4 records LOW Orders Tracking For Woocommerce 2 records MEDIUM Abandoned Cart Recovery For Woocommerce 1 record LOW Cart All In One For Woocommerce 1 record LOW Curcy 1 record LOW Dropshipping And Fulfillment For Aliexpress And Woocommerce 1 record MEDIUM Exmage 1 record LOW Product Size Chart For Woocommerce 1 record LOW

Records

1 record in Cart All In One For Woocommerce · all components

TI-2022-23152 CVE-2022-46806 · GHSA-wqm8-3q2f-cr4h

WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00218 Published 2023-03-01 No fix listed CWE-352

Open these records in search →