Vulnerabilidades em VillaTheme

48 resultados
Análise Vexday

VillaTheme apresenta um acervo moderado de 28 vulnerabilidades, sendo apenas 2 críticas e nenhuma com exploração ativa confirmada até o momento. O risco atual é temperado pela ausência de ataques documentados, mas merece monitoramento pela frequência de descobertas recentes (7 nos últimos 90 dias), predominantemente falhas de injeção XSS (CWE-79) que afetam aplicações web.

CVE-2025-22803MEDIUMWordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57352MEDIUMWordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2025-68556MEDIUMWordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-28132MEDIUMWordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerabilityEPSS 0.2%CVE-2026-57422HIGHWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32526HIGHWordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57664MEDIUMWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-64200MEDIUMWordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%