目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Villatheme 厂商漏洞列表 / CVE 中文分析 68

Villatheme 厂商相关 68 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Villatheme 主要提供 WordPress 主题及插件开发服务。其产品在历史上多次被收录 CVE，常见漏洞类型包括远程代码执行（RCE）、跨站脚本（XSS）及未授权访问等。截至最新统计，已收录 40 条 CVE，反映出代码审计与输入验证方面存在长期安全隐患。建议用户及时更新版本并启用安全插件，以降低潜在的攻击面风险。

Top products by Villatheme: HAPPY CURCY Thank You Page Customizer for WooCommerce – Increase Your Sales Photo Reviews for WooCommerce Thank You Page Customizer for WooCommerce GIFT4U CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Abandoned Cart Recovery for WooCommerce WPBulky BuildKit – Product Builder for WooCommerce – Custom PC Builder Bopo – WooCommerce Product Bundle Builder ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce WooCommerce Photo Reviews Email Template Customizer for WooCommerce AFFI – Affiliate Marketing for WooCommerce CURCY - WooCommerce Multi Currency - Currency Switcher Cart All In One For WooCommerce Notivo Product Variations Swatches for WooCommerce VillaTheme Core Lookzy Suggestion Engine for WooCommerce ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) COMPE Sales Countdown Timer for WooCommerce and WordPress Lucky Wheel Giveaway Lucky Wheel for WooCommerce – Spin a Sale HAPPY – Helpdesk Support Ticket System W2S – Migrate WooCommerce to Shopify Advanced Product Information for WooCommerce
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-28132 WordPress plugin WooCommerce Photo Reviews 安全漏洞 — WooCommerce Photo Reviews CWE-80 5.3 Medium 2026-02-26
CVE-2025-67977 WordPress plugin HAPPY 安全漏洞 — HAPPY CWE-862 8.2 High 2026-02-20
CVE-2026-27052 WordPress plugin Sales Countdown Timer for WooCommerce and WordPress 安全漏洞 — Sales Countdown Timer for WooCommerce and WordPress CWE-98 7.5 High 2026-02-19
CVE-2026-2019 WordPress plugin Cart All In One For WooCommerce 注入漏洞 — Cart All In One For WooCommerce CWE-74 7.2 High 2026-02-18
CVE-2025-14541 WordPress plugin Lucky Wheel Giveaway 代码注入漏洞 — Lucky Wheel Giveaway CWE-94 7.2 High 2026-02-11
CVE-2025-14509 WordPress plugin Lucky Wheel for WooCommerce – Spin a Sale 代码注入漏洞 — Lucky Wheel for WooCommerce – Spin a Sale CWE-94 7.2 High 2025-12-30
CVE-2025-68550 WordPress plugin WPBulky SQL注入漏洞 — WPBulky CWE-89 7.6 High 2025-12-23
CVE-2025-68556 WordPress plugin HAPPY 安全漏洞 — HAPPY CWE-862 5.3 Medium 2025-12-23
CVE-2025-14581 WordPress plugin HAPPY – Helpdesk Support Ticket System 安全漏洞 — HAPPY – Helpdesk Support Ticket System CWE-862 4.3 Medium 2025-12-13
CVE-2025-66528 WordPress plugin Thank You Page Customizer for WooCommerce 安全漏洞 — Thank You Page Customizer for WooCommerce CWE-862 4.3 Medium 2025-12-09
CVE-2025-49372 WordPress plugin HAPPY 代码注入漏洞 — HAPPY CWE-94 10.0 Critical 2025-11-06
CVE-2025-64200 WordPress plugin Email Template Customizer for WooCommerce 安全漏洞 — Email Template Customizer for WooCommerce CWE-79 5.9 Medium 2025-10-29
CVE-2025-47570 WordPress plugin WooCommerce Photo Reviews 跨站脚本漏洞 — WooCommerce Photo Reviews CWE-79 7.1 High 2025-09-09
CVE-2025-53571 WordPress plugin HAPPY 安全漏洞 — HAPPY CWE-862 6.5 Medium 2025-09-05
CVE-2025-30993 WordPress plugin Thank You Page Customizer for WooCommerce 安全漏洞 — Thank You Page Customizer for WooCommerce CWE-862 6.5 Medium 2025-08-14
CVE-2025-47563 WordPress plugin CURCY 安全漏洞 — CURCY CWE-862 5.3 Medium 2025-05-16
CVE-2024-13320 WordPress plugin CURCY - WooCommerce Multi Currency - Currency Switcher SQL注入漏洞 — CURCY - WooCommerce Multi Currency - Currency Switcher CWE-89 7.5 High 2025-03-07
CVE-2024-13487 WordPress plugin CURCY 代码注入漏洞 — CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x CWE-94 7.3 High 2025-02-06
CVE-2024-12861 WordPress plugin W2S 安全漏洞 — W2S – Migrate WooCommerce to Shopify CWE-73 6.5 Medium 2025-01-30
CVE-2025-22803 WordPress plugin Advanced Product Information for WooCommerce 跨站脚本漏洞 — Advanced Product Information for WooCommerce CWE-79 6.5 Medium 2025-01-09
CVE-2022-46796 编号已被CVE保留 — CURCY CWE-862 6.5 Medium 2024-12-13
CVE-2024-49283 WordPress plugin CURCY 跨站脚本漏洞 — CURCY CWE-79 7.1 High 2024-10-17
CVE-2024-49288 WordPress plugin Email Template Customizer for WooCommerce 跨站脚本漏洞 — Email Template Customizer for WooCommerce CWE-79 5.9 Medium 2024-10-17
CVE-2024-8277 WordPress plugin WooCommerce Photo Reviews Premium 安全漏洞 — WooCommerce Photo Reviews Premium CWE-288 9.8 Critical 2024-09-11
CVE-2024-4039 WordPress plugin The Orders Tracking for WooCommerce 安全漏洞 — Orders Tracking for WooCommerce CWE-94 6.5 Medium 2024-05-10
CVE-2024-1687 WordPress Plugin Thank You Page Customizer for WooCommerce 安全漏洞 — Thank You Page Customizer for WooCommerce – Increase Your Sales CWE-862 5.4 Medium 2024-02-27
CVE-2024-1686 WordPress Plugin Thank You Page Customizer for WooCommerce 安全漏洞 — Thank You Page Customizer for WooCommerce – Increase Your Sales CWE-862 4.3 Medium 2024-02-27
CVE-2023-50831 WordPress plugin CURCY 跨站脚本漏洞 — CURCY – Multi Currency for WooCommerce CWE-79 6.5 Medium 2023-12-21
CVE-2023-48778 WordPress Plugin Product Size Chart For WooCommerce 跨站请求伪造漏洞 — Product Size Chart For WooCommerce CWE-352 5.4 Medium 2023-12-18
CVE-2023-30482 WordPress plugin WPBulky – WordPress Bulk Edit Post Types 跨站脚本漏洞 — WPBulky CWE-79 6.5 Medium 2023-08-08

本页汇总了 Villatheme 厂商截至目前公开的全部 68 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。