V
Vendor security profile
VillaTheme
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs21
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
3
16
CVE KEV
CVE severity distribution
21toplam CVE
Critical1 (5%)
High10 (48%)
Medium10 (48%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
21Unknown
Latest vulnerabilities
5.3
CVE-2026-103080
WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability
V
Patch status unknown
5.4
CVE-2026-103356
WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
V
Patch status unknownEPSS %0
4.3
CVE-2026-103685
WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability
V
Patch status unknownEPSS %0
9.8
CVE-2026-104398
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
V
Patch status unknownEPSS %0
7.5
CVE-2026-103071
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
V
Patch status unknownEPSS %0
6.9
CVE-2026-103357
WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
V
Patch status unknownEPSS %0
7.2
CVE-2026-100161
Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter
V
Patch status unknownEPSS %0
4.3
CVE-2026-103072
WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
V
Patch status unknownEPSS %0
5.3
CVE-2026-97275
WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability
V
Patch status unknownEPSS %0
7.1
CVE-2026-100515
WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability
V
Patch status unknownEPSS %0