CVE Intelligence

Kriesi vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kriesi products: 3 record(s), with severity, exploitation and fixes.

Enfold 3

Exploited only (KEV) →

CVE-2026-48869 High · 7.1 CWE-79 Jun 17, 2026
WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions.
CVE-2025-68900 Medium · 6.5 CWE-79 Jan 22, 2026
WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allows DOM-Based XSS. This issue affects Enfold: from n/a through 7.1.3.
CVE-2025-66053 Medium · 6.5 CWE-79 Nov 21, 2025
WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold enfold allows Stored XSS.This issue affects Enfold: from n/a through <= 7.1.2.