Skip to content
Noroxi

EnvoThemes records

10 published records for vendor envothemes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
40%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2024-35167
    21Monitor

    WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceMay 14, 2024

  • CVE-2024-4385
    21Monitor

    Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo extraMay 16, 2024

  • CVE-2024-5645
    21Monitor

    Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo extraJun 7, 2024

  • CVE-2024-32456
    21Monitor

    WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo extraApr 17, 2024

  • CVE-2024-50447
    21Monitor

    WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceOct 28, 2024

  • CVE-2024-43292
    21Monitor

    WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceAug 18, 2024

  • CVE-2024-0766
    17Monitor

    Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request

    MediumCVSS 4.3No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceFeb 28, 2024

  • CVE-2024-0768
    17Monitor

    Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation

    MediumCVSS 4.3No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceFeb 28, 2024

  • CVE-2024-10770
    17Monitor

    Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    envothemes · envo extraNov 9, 2024

  • CVE-2024-0767
    17Monitor

    Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation

    MediumCVSS 4.3No exploitEPSS 0%

    envothemes · envo\'s elementor templates \& widgets for woocommerceFeb 28, 2024