EnvoThemes

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

EnvoThemes records in CISA KEV

No EnvoThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Envo's Elementor Templates & Widgets For Woocommerce 6 records LOW Envo Extra 4 records LOW

Records

6 records in Envo's Elementor Templates & Widgets For Woocommerce · all components

TI-2024-23242 CVE-2024-35167 · GHSA-rxmc-r56m-843f

WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00419 Published 2024-05-13 No fix listed CWE-79

TI-2024-33879 CVE-2024-50447 · GHSA-4xcq-35vg-rj75

Cross-site scripting in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce envo-elementor-for-woocommerce allows Stored XSS.This…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-10-28 No fix listed CWE-79

TI-2024-28944 CVE-2024-43292 · GHSA-5r2h-7rx4-jxmv

Cross-site scripting in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Ele…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2024-08-18 No fix listed CWE-79

TI-2024-00707 CVE-2024-0768 · GHSA-j6c9-6p46-r4qr

Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation

LOW 20

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00322 Published 2024-02-28 No fix listed CWE-352

TI-2024-00706 CVE-2024-0767 · GHSA-hqx2-pqrp-v2ph

Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation

LOW 20

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00275 Published 2024-02-28 No fix listed CWE-352

TI-2024-00705 CVE-2024-0766 · GHSA-prwg-rhfj-26j7

Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request

LOW 20

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the templates_ajax_request function in all versions up…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00457 Published 2024-02-28 No fix listed CWE-284

Open these records in search →