Kriesi Enfold vulnerabilities

• kriesi enfold WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-84815 5.8 MediumSeptember 3, 2026
• kriesi enfold WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-48869 7.1 HighJune 16, 2026
• kriesi enfold WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-68900 6.5 MediumJanuary 22, 2026
• kriesi enfold WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-66053 6.5 MediumNovember 21, 2025
• kriesi enfold, enfold - responsive multi-purpose theme +1 more Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id CVE-2024-13695 6.4 MediumFebruary 25, 2025
• kriesi enfold, enfold - responsive multi-purpose theme +1 more Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php CVE-2024-13693 5.3 MediumFebruary 25, 2025
• kriesi enfold, enfold - responsive multi-purpose theme +1 more Enfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters CVE-2024-5061 6.4 MediumAugust 30, 2024
• kriesi enfold WordPress Enfold theme <= 5.6.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37199 7.1 HighJuly 22, 2024
• kriesi enfold, enfold - responsive multi-purpose theme +1 more WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-38400 7.1 HighNovember 30, 2023
• kriesi enfold Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS) CVE-2021-24719 Public exploit 6.1 MediumOctober 11, 2021
• kriesi enfold Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress... CVE-2014-7297 10.0 HighOctober 13, 2014