Envato
5 CVEs across 8 Envato products. Browse Envato vulnerabilities, severities, and proof-of-concept exploits.
Envato products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56275 | Medium | 4.1 | 2025-01-07 | Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elements allows Server Side Request Forgery.This issue affects Envato Elements: from n/a thro… |
CVE-2024-37550 | Medium | 5.9 | 2024-07-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Envato Template Kit – Export allows Stored XSS.Thi… |
CVE-2024-2334 | Medium | 6.4 | 2024-04-09 | The Template Kit – Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template upload functionality in all versions up to, and in… |
CVE-2021-4330 | High | 8.8 | 2023-03-07 | The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file… |
CVE-2013-5962 | | 2013-09-30 | Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote att… |