envothemes Envo's Templates & Widgets for Elementor and WooCommerce vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest envothemes Envo's Templates & Widgets for Elementor and WooCommerce vulnerabilities

CVE-2026-11600 — Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting (CVSS 4.3)
CVE-2024-50447 — WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-43292 — WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-35167 — WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-0768 — Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation (CVSS 4.3)
CVE-2024-0767 — Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation (CVSS 4.3)
CVE-2024-0766 — Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request (CVSS 4.3)