edited
Why send the fpa? All that shows as being significant is that you are using insecure permissions for tmp & vmfiles - inviting to hackers, so I'd fix that before somebody sees this and decides to try it on!
I don't know what is wrong with the modules, looks like a module templat override issue - they don't appear to be the default VM modules. You also should not see the Notify link there as that indicates they are out of stock and not orderable, but from product details page they obviously can be ordered.