Browse CVEs

MEDIUM 5.4 CVE-2024-13695 The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_id' param… Enfold 7.0.0+ Fix from $1,6002025-02-25 MEDIUM 5.3 CVE-2024-13693 The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all version… Enfold 7.0+ Fix from $1,6002025-02-25 MEDIUM 5.4 CVE-2024-5061 The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wrapper_class’ and 'class' para… Enfold after 6.0.3 Fix from $1,6002024-08-30 MEDIUM 6.1 CVE-2024-37199 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kriesi.At Enfold allows Reflected XSS.Th… Enfold 5.6.10+ Fix from $1,6002024-07-22 MEDIUM 6.1 CVE-2023-38400 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold - Responsive Multi-Purpose Theme … Enfold after 5.6.4 Fix from $1,6002023-11-30 MEDIUM 6.1 CVE-2021-24719 The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold version… Enfold 4.8.4+ Fix from $1,6002021-10-11 HIGH 10.0 CVE-2014-7297 Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors. Enfold after 3.0 Fix from $1,9502014-10-13