themelocation vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20252
4. 20262

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-13900

  WP Popup Magic <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute

  themelocation · WP Popup Magic

  Medium6.4
• CVE-2025-58799

  WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

  themelocation · Custom WooCommerce Checkout Fields Editor

  Medium4.3
• CVE-2025-52783

  WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

  themelocation · Change Cart button Colors WooCommerce

  High7.1
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-43271

  WordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.0 - Local File Inclusion vulnerability

  Themelocation · Woo Products Widgets For Elementor

  High8.5
• CVE-2024-33956

  WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability

  ThemeLocation · Custom WooCommerce Checkout Fields Editor

  Medium4.3
• CVE-2024-30518

  WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

  ThemeLocation · Custom WooCommerce Checkout Fields Editor

  Medium4.3
• CVE-2024-1697

  Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  themelocation · Custom WooCommerce Checkout Fields Editor

  Medium6.4
• CVE-2023-46629

  WordPress Remove Add to Cart WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

  themelocation · Remove Add to Cart WooCommerce

  Medium4.3