Vendor

    VillaTheme

    81 known vulnerabilities in products by VillaTheme, 0 of them actively exploited (CISA KEV).

    Key figures

    81

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in VillaTheme
    CriticalCVE-2024-8277

    VillaTheme WooCommerce Photo Reviews Premium: Authentication Bypass Using an Alternate Path or Channel

    		9.8
    CriticalCVE-2026-104398

    VillaTheme AFFI: Deserialization of Untrusted Data

    		9.8
    HighCVE-2022-1037

    EXMAGE < 1.0.7 - Admin+ Blind SSRF

    		7.2
    HighCVE-2026-101923

    VillaTheme Photo Reviews for WooCommerce: Missing Authorization

    		8.1
    CriticalCVE-2025-49372

    WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability

    		10.0
    HighCVE-2026-82227

    WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-81277

    WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-102379

    SQL Injection (CVE-2026-102379)

    		8.5
    HighCVE-2026-103358

    VillaTheme Email Template Customizer for WooCommerce: Code Injection

    		7.5
    HighCVE-2026-81786

    VillaTheme Thank You Page Customizer for WooCommerce: Missing Authorization

    		7.5
    HighCVE-2026-103081

    WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

    		7.5
    HighCVE-2026-100517

    VillaTheme Photo Reviews for WooCommerce: Authorization Bypass Through User-Controlled Key

    		7.5
    HighCVE-2025-14509

    VillaTheme Lucky Wheel for WooCommerce: Code Injection

    		7.2
    HighCVE-2026-103071

    VillaTheme Thank You Page Customizer for WooCommerce: Code Injection

    		7.5
    HighCVE-2026-100161

    VillaTheme Photo Reviews for WooCommerce: Cross-site Scripting

    		7.2
    HighCVE-2022-41623

    VillaTheme Dropshipping And Fulfillment For Aliexpress And Woocommerce: Exposure of Sensitive Information Through Data Queries

    		7.5
    HighCVE-2024-13487

    Code Injection (CVE-2024-13487)

    		7.3
    HighCVE-2026-112827

    VillaTheme HANDMADE: Missing Authorization

    		7.1
    HighCVE-2025-14541

    VillaTheme Lucky Wheel Giveaway: Code Injection

    		7.2
    MediumCVE-2026-103357

    WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

    		—
    CriticalCVE-2026-54809

    WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-2019

    VillaTheme Cart All In One For WooCommerce: Injection

    		7.2
    HighCVE-2026-100515

    WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-94171

    WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-102383

    WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

    		6.5

    All vulnerabilities in search

    Products

    Products by VillaTheme
    VillaTheme CURCY60
    Photo Reviews For Woocommerce50
    VillaTheme HAPPY50
    Abandoned Cart Recovery For Woocommerce40
    Thank You Page Customizer for WooCommerce40
    Thank You Page Customizer For Woocommerce40
    Thank You Page Customizer For Woocommerce – Increase Your Sales40
    Bopo – Woocommerce Product Bundle Builder30
    Cart All In One For Woocommerce30
    Curcy – Multi Currency For Woocommerce – Smoothly On Woocommerce 9.x30
    Email Template Customizer For Woocommerce30
    Orders Tracking for WooCommerce30
    VillaTheme GIFT4U30
    VillaTheme WPBulky30
    Woocommerce Photo Reviews30