Envothemes vulnerabilities

Products

• Envo Extra 7
• Envo\'s Elementor Templates \& Widgets For Woocommerce 6
• Envo Extra 4
• Envo's Templates & Widgets For Elementor And Woocommerce 4
• Envo's Elementor Templates & Widgets For Woocommerce 3

Newest

• envothemes envo's templates & widgets for elementor and woocommerce Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting CVE-2026-11600 4.3 MediumJuly 2, 2026
• envothemes envo extra WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability CVE-2026-32386 4.3 MediumMarch 13, 2026
• envothemes envo extra WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability CVE-2025-66066 6.5 MediumNovember 21, 2025
• envothemes envo extra WordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability CVE-2025-47471 4.3 MediumMay 7, 2025
• envothemes envo multipurpose WordPress Envo Multipurpose theme <= 1.1.6 - Broken Access Control vulnerability CVE-2025-22770 5.4 MediumMarch 27, 2025
• envothemes envo extra Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure CVE-2024-10770 4.3 MediumNovember 9, 2024
• envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability CVE-2024-50447 6.5 MediumOctober 28, 2024
• envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability CVE-2024-43292 5.9 MediumAugust 18, 2024
• envothemes envo extra Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget CVE-2024-5645 6.4 MediumJune 7, 2024
• envothemes envo extra Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting CVE-2024-4385 6.4 MediumMay 16, 2024
• envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-35167 6.5 MediumMay 13, 2024
• envothemes envo extra WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-32456 6.5 MediumApril 17, 2024
• envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation CVE-2024-0767 4.3 MediumFebruary 28, 2024
• envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request CVE-2024-0766 4.3 MediumFebruary 28, 2024
• envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 more Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation CVE-2024-0768 4.3 MediumFebruary 28, 2024