What’s Vulnerable › Products

VillaTheme Cart All In One For WooCommerce vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your VillaTheme Cart All In One For WooCommerce version is affected

Latest VillaTheme Cart All In One For WooCommerce vulnerabilities

• CVE-2026-2019 — Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting (CVSS 7.2)
• CVE-2022-46806 — WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)