Vulnerabilidades de EnvoThemes

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de EnvoThemes: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-32386 Média · 4.3 CWE-862 13/03/2026

WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Extra: from n/a through <= 1.9.13.

CVE-2025-66066 Média · 6.5 CWE-79 21/11/2025

WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo Extra envo-extra allows Stored XSS.This issue affects Envo Extra: from n/a through <= 1.9.11.