Skip to content
OpenAdvisories

Product · ThemeKalia

Envolve Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-11615

    Envolve Plugin <= 1.0 - Unauthenticated Language File Deletion

    The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.0 via the 'zetra_deleteLanguageFile' and 'zetra_deleteFontsFile' functions. This is due to the plugin not properly validating a file or it…

    ThemeKalia Envolve Plugin Web / CMS