Skip to content
OpenAdvisories

Vendor

envato

5 known vulnerabilities.

Products

Template Kit – Import 3 Envato Elements – Photos & Elementor Templates 1 Envato Elements 1 Template Kit – Export 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-4330

    Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload

    The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTemplateKit and uploadTemplateKitZipFile f…

    envato Template Kit – Import Envato Elements – Photos & Elementor Templates