Skip to content
OpenAdvisories

Product · ThemeKalia

Envolve Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-11617

    Envolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file

    The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'zetra_languageUpload' and 'zetra_fontsUpload' functions in all versions up to, and including, 1.0. This makes it possible for unauthent…

    ThemeKalia Envolve Plugin Web / CMS