Read the docs

VillaTheme

Records83All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

VillaTheme records in CISA KEV

No VillaTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Thank You Page Customizer 4 records LOW Orders Tracking For Woocommerce 2 records MEDIUM Abandoned Cart Recovery For Woocommerce 1 record LOW Cart All In One For Woocommerce 1 record LOW Curcy 1 record LOW Dropshipping And Fulfillment For Aliexpress And Woocommerce 1 record MEDIUM Exmage 1 record LOW Product Size Chart For Woocommerce 1 record LOW

Records

1 record in Curcy · all components

TI-2023-27736 CVE-2023-50831 · GHSA-66cx-ccvm-pmf5

WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This issue affects CURCY – Multi Currency for WooC…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00517 Published 2023-12-21 No fix listed CWE-79
Open these records in search →