How many VillaTheme WooCommerce Photo Reviews CVEs are in CISA KEV?

None of VillaTheme WooCommerce Photo Reviews's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of VillaTheme WooCommerce Photo Reviews are affected?

6 distinct VillaTheme WooCommerce Photo Reviews versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in VillaTheme WooCommerce Photo Reviews CVEs?

VillaTheme WooCommerce Photo Reviews's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).

What is the average severity of VillaTheme WooCommerce Photo Reviews CVEs?

The average CVSS base score across VillaTheme WooCommerce Photo Reviews's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

VillaTheme

3 CVEs

VillaTheme WooCommerce Photo Reviews Vulnerabilities

Name: VillaTheme WooCommerce Photo Reviews vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WooCommerce Photo Reviews by VillaTheme.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2024–2026

Last updated February 26, 2026

Overview

VillaTheme WooCommerce Photo Reviews has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting VillaTheme WooCommerce Photo Reviews, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of VillaTheme WooCommerce Photo Reviews's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of VillaTheme WooCommerce Photo Reviews's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No VillaTheme WooCommerce Photo Reviews CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every VillaTheme WooCommerce Photo Reviews version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.3.141 CVE
<= 1.3.131 CVE
<= 1.4.41 CVE

Fixed in

> 1.3.131 CVE
> 1.4.41 CVE
1.3.141 CVE

Find a version

3 CVEs

Sort

WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability
CVE-2026-28132
Patch
CWE-80
Medium · CVSS 5.3
EPSS 0.2% (9th pct)2026-02-26
WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-47570
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (13th pct)2025-09-09
WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation
CVE-2024-8277
Patch
CWE-288
Critical · CVSS 9.8
EPSS 1.6% (74th pct)2024-09-11

Common weakness types

The CWE weakness categories most often found in VillaTheme WooCommerce Photo Reviews CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many VillaTheme WooCommerce Photo Reviews CVEs were published each year.

2024

1

2025

1

2026

1

Other VillaTheme products

Browse vulnerabilities for other products by VillaTheme.

HAPPY5 CVEs Thank You Page Customizer for WooCommerce – Increase Your Sales5 CVEs CURCY4 CVEs woocommerce thank you page customizer4 CVEs Abandoned Cart Recovery for WooCommerce3 CVEs CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x3 CVEs orders tracking for woocommerce3 CVEs ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce2 CVEs

All VillaTheme vulnerabilities

Frequently asked questions

Common questions about VillaTheme WooCommerce Photo Reviews vulnerabilities.

How many CVEs does VillaTheme WooCommerce Photo Reviews have?: VillaTheme WooCommerce Photo Reviews has 3 published CVE records since 2024.
How many VillaTheme WooCommerce Photo Reviews CVEs are in CISA KEV?: None of VillaTheme WooCommerce Photo Reviews's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for VillaTheme WooCommerce Photo Reviews vulnerabilities?: No VillaTheme WooCommerce Photo Reviews CVEs currently have a tracked public exploit in this dataset.
Which versions of VillaTheme WooCommerce Photo Reviews are affected?: 6 distinct VillaTheme WooCommerce Photo Reviews versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in VillaTheme WooCommerce Photo Reviews CVEs?: VillaTheme WooCommerce Photo Reviews's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).
How many critical VillaTheme WooCommerce Photo Reviews vulnerabilities are there?: VillaTheme WooCommerce Photo Reviews has 1 critical and 1 high-severity CVEs.
What is the average severity of VillaTheme WooCommerce Photo Reviews CVEs?: The average CVSS base score across VillaTheme WooCommerce Photo Reviews's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track VillaTheme WooCommerce Photo Reviews vulnerabilities

Monitor new VillaTheme WooCommerce Photo Reviews vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing