Villatheme Email Template Customizer For Woocommerce vulnerabilities

2 CVEs affecting Villatheme Email Template Customizer For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-103358, published 2026-10-14.

More from Villatheme.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-103358, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue…
• CVE-2025-64200, published 2025-10-29. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows…