Advisories · Technology
villatheme Cart All In One For WooCommerce.
Every CVE that names villatheme Cart All In One For WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting
- villatheme Cart All In One For WooCommerce
- Other injection
- CVSS 5.4 Medium
WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
- VillaTheme Cart All In One For WooCommerce
- Cross-site request forgery (CSRF)