high7.5

CVE-2026-103358

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-w…

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4.

Affected products

Product	Affected versions
Email Template Customizer For WooCommerce: From N/A	through 1.3.4.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/email-template-customizer-for-woo/vulnerability/wordpress-email-template-customizer-for-woocommerce-plugin-1-3-4-content-injection-vulnerability?_s_id=cve