Envato vulnerabilities
5 published CVEs name Envato among the affected products.
- Published CVEs
- 5
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20242
- 20251
- 20261
Newest CVEs
- CVE-2026-96824
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
envato · Template Kit – Import
Medium6.8 - CVE-2024-56275
WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability
Envato · Envato Elements
Medium4.1 - CVE-2024-37550
WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability
Envato · Template Kit – Export
Medium5.9 - CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
envato · Template Kit – Import
Medium6.4 - CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
envato · Template Kit – Import
High8.8