What’s Vulnerable › Products

EnvoThemes Envo Extra vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your EnvoThemes Envo Extra version is affected

Latest EnvoThemes Envo Extra vulnerabilities

• CVE-2026-32386 — WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-66066 — WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-47471 — WordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability (CVSS 4.3)
• CVE-2024-10770 — Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
• CVE-2024-5645 — Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget (CVSS 5.4)
• CVE-2024-4385 — Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting (CVSS 5.4)
• CVE-2024-32456 — WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)