Kriesi vulnerabilities
8 published CVEs name Kriesi among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84815
WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability
Kriesi · Enfold
Medium5.8 - CVE-2026-48869
WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Kriesi · Enfold
High7.1 - CVE-2025-68900
WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability
Kriesi · Enfold
Medium6.5 - CVE-2025-66053
WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Kriesi · Enfold
Medium6.5 - CVE-2024-13695
Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
Kriesi · Enfold - Responsive Multi-Purpose Theme
Medium6.4 - CVE-2024-13693
Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
Kriesi · Enfold - Responsive Multi-Purpose Theme
Medium5.3 - CVE-2024-5061
Enfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters
Kriesi · Enfold - Responsive Multi-Purpose Theme
Medium6.4 - CVE-2023-38400
WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)
Kriesi · Enfold - Responsive Multi-Purpose Theme
High7.1