Read the docs

VillaTheme

Records83All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

VillaTheme records in CISA KEV

No VillaTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Thank You Page Customizer 4 records LOW Orders Tracking For Woocommerce 2 records MEDIUM Abandoned Cart Recovery For Woocommerce 1 record LOW Cart All In One For Woocommerce 1 record LOW Curcy 1 record LOW Dropshipping And Fulfillment For Aliexpress And Woocommerce 1 record MEDIUM Exmage 1 record LOW Product Size Chart For Woocommerce 1 record LOW

Records

4 records in Woocommerce Thank You Page Customizer · all components

TI-2024-01567 CVE-2024-1686 · GHSA-2r3p-7g4x-2m8x

Missing authorization in VillaTheme Thank You Page Customizer for WooCommerce – Increase…

Priority LOW 29

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the apply_layout function due to a missing…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00406 Published 2024-02-27 No fix listed CWE-862
TI-2024-01568 CVE-2024-1687 · GHSA-6cc6-q8x8-h7vm

Missing authorization in VillaTheme Thank You Page Customizer for WooCommerce – Increase…

Priority LOW 25

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the get_text_editor_content() function i…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00367 Published 2024-02-27 No fix listed CWE-862
Open these records in search →