What’s Vulnerable › Products

envato Template Kit – Import vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your envato Template Kit – Import version is affected

Latest envato Template Kit – Import vulnerabilities

• CVE-2026-96824 — WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability (CVSS 6.8)
• CVE-2024-2334 — Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload (CVSS 6.4)