Skip to content
OpenAdvisories

Vendor

envato

5 known vulnerabilities.

Products

Template Kit – Import 3 Envato Elements – Photos & Elementor Templates 1 Envato Elements 1 Template Kit – Export 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-96824

    WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability

    Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

    envato Template Kit – Import
  • Medium 4.1
    CVE-2024-56275

    WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elements allows Server Side Request Forgery.This issue affects Envato Elements: from n/a through 2.0.14.

    envato Envato Elements
  • Medium 5.9
    CVE-2024-37550

    WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Envato Template Kit – Export allows Stored XSS.This issue affects Template Kit – Export: from n/a through 1.0.22.

    envato Template Kit – Export
  • Medium 6.4
    CVE-2024-2334

    Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload

    The Template Kit – Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template upload functionality in all versions up to, and including, 1.0.14 due to insufficient input sanitization and output escaping. This makes it possible f…

    envato Template Kit – Import Web / CMS