Read the docs

envato

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

envato records in CISA KEV

No envato vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Complete Gallery Manager Plugin 1 record LOW Envato Elements 1 record MEDIUM Template Kit - Export 1 record LOW Template Kit - Import 1 record MEDIUM

Records

1 record in Template Kit - Import · all components

TI-2021-03188 CVE-2021-4330 · GHSA-975q-7mxh-v8gj

Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload

Priority MEDIUM 43

The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTem…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01514 Published 2023-03-07 No fix listed CWE-434
Open these records in search →