envothemes vulnerabilities

CVEs per yearBy the year they were published

1. 202410
2. 20253
3. 20262

Newest CVEs

• CVE-2026-11600

  Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting

  envothemes · Envo's Templates & Widgets for Elementor and WooCommerce

  Medium4.3
• CVE-2026-32386

  WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability

  EnvoThemes · Envo Extra

  Medium4.3
• CVE-2025-66066

  WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability

  EnvoThemes · Envo Extra

  Medium6.5
• CVE-2025-47471

  WordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability

  EnvoThemes · Envo Extra

  Medium4.3
• CVE-2025-22770

  WordPress Envo Multipurpose theme <= 1.1.6 - Broken Access Control vulnerability

  EnvoThemes · Envo Multipurpose

  Medium5.4
• CVE-2024-10770

  Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure

  envothemes · Envo Extra

  Medium4.3
• CVE-2024-50447

  WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability

  EnvoThemes · Envo's Elementor Templates & Widgets for WooCommerce

  Medium6.5
• CVE-2024-43292

  WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability

  EnvoThemes · Envo's Elementor Templates & Widgets for WooCommerce

  Medium5.9
• CVE-2024-5645

  Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

  envothemes · Envo Extra

  Medium6.4
• CVE-2024-4385

  Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting

  envothemes · Envo Extra

  Medium6.4