目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Villatheme 厂商漏洞列表 / CVE 中文分析 68

Villatheme 厂商相关 68 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Villatheme 主要提供 WordPress 主题及插件开发服务。其产品在历史上多次被收录 CVE，常见漏洞类型包括远程代码执行（RCE）、跨站脚本（XSS）及未授权访问等。截至最新统计，已收录 40 条 CVE，反映出代码审计与输入验证方面存在长期安全隐患。建议用户及时更新版本并启用安全插件，以降低潜在的攻击面风险。

Top products by Villatheme: HAPPY CURCY Thank You Page Customizer for WooCommerce – Increase Your Sales Photo Reviews for WooCommerce Thank You Page Customizer for WooCommerce GIFT4U CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Abandoned Cart Recovery for WooCommerce WPBulky BuildKit – Product Builder for WooCommerce – Custom PC Builder Bopo – WooCommerce Product Bundle Builder ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce WooCommerce Photo Reviews Email Template Customizer for WooCommerce AFFI – Affiliate Marketing for WooCommerce CURCY - WooCommerce Multi Currency - Currency Switcher Cart All In One For WooCommerce Notivo Product Variations Swatches for WooCommerce VillaTheme Core Lookzy Suggestion Engine for WooCommerce ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) COMPE Sales Countdown Timer for WooCommerce and WordPress Lucky Wheel Giveaway Lucky Wheel for WooCommerce – Spin a Sale HAPPY – Helpdesk Support Ticket System W2S – Migrate WooCommerce to Shopify Advanced Product Information for WooCommerce
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-103685 WordPress ALD 插件 <=2.2.4 访问控制漏洞 — ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce CWE-862 4.3 Medium 2026-10-10
CVE-2026-104398 WordPress AFFI插件<=1.0.10 PHP对象注入漏洞 — AFFI – Affiliate Marketing for WooCommerce CWE-502 9.8 Critical 2026-10-10
CVE-2026-103071 WordPress Thank You Page Customizer for WooCommerce <=1.2.3 内容注入漏洞 — Thank You Page Customizer for WooCommerce CWE-94 7.5 High 2026-10-10
CVE-2026-103357 WordPress GIFT4U插件 <=1.1.3 访问控制漏洞 — GIFT4U CWE-862 6.9 Medium 2026-10-10
CVE-2026-100161 WooCommerce Photo Reviews <=1.2.30 未授权存储型XSS漏洞 — Photo Reviews for WooCommerce CWE-79 7.2 High 2026-10-10
CVE-2026-103072 WordPress VillaTheme Core 插件<=1.0.5 访问控制漏洞 — VillaTheme Core CWE-862 4.3 Medium 2026-10-08
CVE-2026-97275 WordPress BuildKit插件1.0.28及以下版本绕过漏洞 — BuildKit – Product Builder for WooCommerce – Custom PC Builder CWE-1284 5.3 Medium 2026-10-05
CVE-2026-100515 WordPress WooCommerce插件Photo Reviews <=1.2.30 跨站脚本漏洞 — Photo Reviews for WooCommerce CWE-79 7.1 High 2026-10-05
CVE-2026-102383 WordPress Lookzy插件<=1.1.14访问控制漏洞 — Lookzy CWE-862 6.5 Medium 2026-10-05
CVE-2026-97071 WordPress CURCY插件≤2.2.17 访问控制漏洞 — CURCY CWE-682 5.3 Medium 2026-10-05
CVE-2026-101923 Photo Reviews for WooCommerce <= 1.2.30 未授权任意帖子删除漏洞 — Photo Reviews for WooCommerce CWE-862 8.1 High 2026-10-03
CVE-2026-100517 WordPress Photo Reviews插件1.2.30 IDOR漏洞 — Photo Reviews for WooCommerce CWE-639 7.5 High 2026-10-01
CVE-2026-102379 WordPress BuildKit插件1.0.28 SQL注入漏洞 — BuildKit – Product Builder for WooCommerce – Custom PC Builder CWE-89 8.5 High 2026-10-01
CVE-2026-102390 WordPress AFFI插件1.0.9访问控制漏洞 — AFFI – Affiliate Marketing for WooCommerce CWE-862 5.3 Medium 2026-10-01
CVE-2026-94171 WordPress CURCY插件2.2.16跨站脚本漏洞 — CURCY CWE-79 7.1 High 2026-09-30
CVE-2026-97261 WordPress Notivo插件1.4.2敏感数据泄露漏洞 — Notivo CWE-201 5.3 Medium 2026-09-30
CVE-2026-81786 WordPress Thanko Thank You Page Customizer for WooCommerce 授权问题漏洞 — Thank You Page Customizer for WooCommerce CWE-862 7.5 High 2026-09-10
CVE-2026-81282 villatheme Product Variations Swatches for WooCommerce 跨站脚本漏洞 — Product Variations Swatches for WooCommerce CWE-79 6.5 Medium 2026-09-03
CVE-2026-82227 WordPress WPBulky SQL注入漏洞 — WPBulky CWE-89 8.5 High 2026-08-28
CVE-2026-81277 WordPress Suggestion Engine for WooCommerce SQL注入漏洞 — Suggestion Engine for WooCommerce CWE-89 8.5 High 2026-08-27
CVE-2026-57698 Villatheme Abandoned Cart Recovery for WooCommerce 授权问题漏洞 — Abandoned Cart Recovery for WooCommerce CWE-288 6.5 Medium 2026-07-13
CVE-2026-57422 VillaTheme Bopo – WooCommerce Product Bundle Builder 跨站脚本漏洞 — Bopo – WooCommerce Product Bundle Builder CWE-79 7.1 High 2026-07-13
CVE-2026-11778 villatheme CURCY 代码注入漏洞 — CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x CWE-94 5.4 Medium 2026-07-03
CVE-2026-57352 VillaTheme ALD 授权问题漏洞 — ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce CWE-1390 4.8 Medium 2026-07-02
CVE-2026-57664 VillaTheme Bopo – WooCommerce Product Bundle Builder 信息泄露漏洞 — Bopo – WooCommerce Product Bundle Builder CWE-497 4.3 Medium 2026-06-26
CVE-2026-57324 VillaTheme GIFT4U 授权问题漏洞 — GIFT4U CWE-862 6.5 Medium 2026-06-26
CVE-2026-54809 villatheme GIFT4U SQL注入漏洞 — GIFT4U CWE-89 9.3 Critical 2026-06-17
CVE-2026-39593 WordPress plugin HAPPY 安全漏洞 — HAPPY CWE-862 6.5 Medium 2026-05-21
CVE-2026-40737 WordPress plugin COMPE 安全漏洞 — COMPE CWE-639 5.3 Medium 2026-04-15
CVE-2026-32526 WordPress plugin Abandoned Cart Recovery for WooCommerce 安全漏洞 — Abandoned Cart Recovery for WooCommerce CWE-79 7.1 High 2026-03-25

本页汇总了 Villatheme 厂商截至目前公开的全部 68 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。