CVE Intelligence

EnvoThemes Envo Extra vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting EnvoThemes Envo Extra: 2 record(s), with affected versions and fixes.

CVE-2026-32386 Medium · 4.3 CWE-862 Mar 13, 2026
WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Extra: from n/a through <= 1.9.13.
CVE-2025-66066 Medium · 6.5 CWE-79 Nov 21, 2025
WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo Extra envo-extra allows Stored XSS.This issue affects Envo Extra: from n/a through <= 1.9.11.