Envato vulnerabilities
5 published CVEs name Envato among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-96824
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
envato · Template Kit – Import
Medium6.8 - CVE-2024-56275
WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability
Envato · Envato Elements
Medium4.1 - CVE-2024-37550
WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability
Envato · Template Kit – Export
Medium5.9 - CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
envato · Template Kit – Import
Medium6.4 - CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
envato · Template Kit – Import
High8.8