Villatheme Cart All In One For Woocommerce
2 CVEs affecting Villatheme Cart All In One For Woocommerce. Latest disclosed: 2026-02-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2019 | High | 7.2 | 2026-02-18 | The Cart All In One For WooCommerce plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.1.21. This is due to insuffici… |
CVE-2022-46806 | Medium | 5.4 | 2023-03-01 | Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification. |