Lucky Wheel for WooCommerce – Spin a Sale vulnerabilities
1 known vulnerability in Lucky Wheel for WooCommerce – Spin a Sale from VillaTheme. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
Lucky Wheel for WooCommerce – Spin a Sale: Improper Control of Generation of Code
The Lucky Wheel for WooCommerce – Spin a Sale plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.1.13. This is due to the plugin using eval() to execute user-supplied input from the 'Conditional Tags' setting witho