Vendor

    EnvoThemes

    15 known vulnerabilities in products by EnvoThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in EnvoThemes
    MediumCVE-2026-11600

    EnvoThemes Envo's Templates & Widgets for Elementor and WooCommerce: Missing Authorization

    		4.3
    MediumCVE-2024-35167

    EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce: Cross-site Scripting

    		6.5
    MediumCVE-2025-66066

    WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-4385

    Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting

    		6.4
    MediumCVE-2026-32386

    WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-5645

    Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

    		6.4
    MediumCVE-2024-32456

    WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-50447

    EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce: Cross-site Scripting

    		6.5
    MediumCVE-2024-0766

    EnvoThemes Envo's Templates & Widgets for Elementor and WooCommerce: Improper Access Control

    		4.3
    MediumCVE-2025-22770

    WordPress Envo Multipurpose theme <= 1.1.6 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-43292

    EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce: Cross-site Scripting

    		5.9
    MediumCVE-2025-47471

    WordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability

    		4.3
    MediumCVE-2024-10770

    Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure

    		4.3
    MediumCVE-2024-0768

    EnvoThemes Envo's Templates & Widgets for Elementor and WooCommerce: Cross-Site Request Forgery (CSRF)

    		4.3
    MediumCVE-2024-0767

    EnvoThemes Envo's Templates & Widgets for Elementor and WooCommerce: Cross-Site Request Forgery (CSRF)

    		4.3

    Products

    Products by EnvoThemes
    Envo Extra110
    Envo\'s Elementor Templates \& Widgets For Woocommerce90
    Envo's Templates & Widgets For Elementor And Woocommerce40