Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 38
   CVE NVD 2h ago

   The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing…

   The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajax_remove_uploaded() function in versions…

   CVSS 9.1 CVE-2026-122041 Themehigh Web platform
2. 8
   CVE NVD 7d ago

   The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start /…

   The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start / <fieldname>_end' parameter in all versions up to, and including, 3.3.2 due to…

   CVSS 6.1 CVE-2026-104926 ThemeHigh Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Themehigh&limit=100. RSS for this section: feed.xml.