Vendor

    ThemeHigh

    20 known vulnerabilities in products by ThemeHigh, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ThemeHigh
    CriticalCVE-2022-0783

    Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi

    		9.8
    CriticalCVE-2024-0705

    Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2023-3162

    Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

    also in 1 other product

    		9.8
    HighCVE-2026-81534

    ThemeHigh Email Customizer for WooCommerce (Pro): Injection

    		8.8
    MediumCVE-2026-14955

    Themehigh Checkout Field Editor for WooCommerce (Pro): Path Traversal

    		6.5
    HighCVE-2022-3490

    Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection

    		7.2
    MediumCVE-2026-9832

    ThemeHigh Payment Gateway of Stripe for WooCommerce: Improper Verification of Cryptographic Signature

    		5.3
    HighCVE-2026-102392

    Deserialization of Untrusted Data (CVE-2026-102392)

    		7.2
    CriticalCVE-2024-35658

    ThemeHigh Checkout Field Editor for WooCommerce (Pro): Path Traversal

    		8.6
    HighCVE-2023-5906

    Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure

    		7.5
    HighCVE-2024-32781

    WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2026-104926

    ThemeHigh WooCommerce Extra Product Options Pro: Cross-site Scripting

    		6.1
    MediumCVE-2026-45217

    ThemeHigh Stripe Payment Gateway for WooCommerce: Authentication Bypass Using an Alternate Path or Channel

    		6.5
    HighCVE-2026-3231

    ThemeHigh Checkout Field Editor (Checkout Manager) for WooCommerce: Cross-site Scripting

    		7.2
    CriticalCVE-2023-51545

    ThemeHigh Job Manager \& Career: Deserialization of Untrusted Data

    		9.6
    MediumCVE-2025-67553

    WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2025-67556

    WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2024-8499

    ThemeHigh Checkout Field Editor (Checkout Manager) for WooCommerce: Cross-site Scripting

    		4.7
    MediumCVE-2025-13974

    Cross-site Scripting (CVE-2025-13974)

    		4.4
    MediumCVE-2025-49077

    ThemeHigh Dynamic Pricing and Discount Rules: Cross-Site Request Forgery (CSRF)

    		4.3

    Products

    Products by ThemeHigh
    Checkout Field Editor (Checkout Manager) for WooCommerce30
    Payment Gateway Of Stripe For Woocommerce30