Villatheme Salevo vulnerabilities

2 CVEs affecting Villatheme Salevo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-103081, published 2026-10-14.

More from Villatheme.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-103081, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0.
• CVE-2026-103080, published 2026-10-12. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0.