villatheme vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20239
3. 20247
4. 202515
5. 202645

Newest CVEs

• CVE-2026-110251

  Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter

  villatheme · Revopic – Photo Reviews for WooCommerce

  Medium5.4
• CVE-2026-112827

  WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability

  VillaTheme · HANDMADE – Dropshipping for Etsy and WooCommerce

  High7.1
• CVE-2026-111404

  WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability

  VillaTheme · Photo Reviews for WooCommerce

  Low3.7
• CVE-2026-112839

  WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability

  VillaTheme · Customer Coupons for WooCommerce

  Medium4.3
• CVE-2026-110377

  WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability

  VillaTheme · Bopo – WooCommerce Product Bundle Builder

  Medium5.3
• CVE-2026-110376

  WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability

  VillaTheme · DEPART

  Medium4.3
• CVE-2026-103081

  WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

  VillaTheme · Salevo

  High7.5
• CVE-2026-103358

  WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability

  VillaTheme · Email Template Customizer for WooCommerce

  High7.5
• CVE-2026-103080

  WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability

  VillaTheme · Salevo

  Medium5.3
• CVE-2026-103356

  WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability

  VillaTheme · TMDS

  Medium5.4