ThemeLocation vulnerabilities
We track 2 vulnerabilities in ThemeLocation products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2025.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest ThemeLocation vulnerabilities
- 7.1 High severity
Change Cart button Colors WooCommerce: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in themelocation Change Cart button Colors WooCommerce wc-style allows Stored XSS.This issue affects Change Cart button Colors WooCommerce: from n/a through <= 1.0.
- 8.5 High severity
Woo Products Widgets For Elementor: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themelocation Woo Products Widgets For Elementor allows PHP Local File Inclusion.This issue affects Woo Products Widgets For Elementor: from n/a through 2.0.0.