CVE-2026-103080: Villatheme Salevo

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0.

Affected products

• Villatheme Salevo: up to and including 1.3.0

Published 2026-10-12. Last modified 2026-10-13.