What’s Vulnerable › Products

Kriesi Enfold vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Kriesi Enfold version is affected

Latest Kriesi Enfold vulnerabilities

• CVE-2026-84815 — WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.8)
• CVE-2026-48869 — WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-68900 — WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-66053 — WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-13695 — Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id (CVSS 5.4)
• CVE-2024-13693 — Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php (CVSS 5.3)
• CVE-2024-5061 — Enfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters (CVSS 5.4)
• CVE-2024-37199 — WordPress Enfold theme <= 5.6.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2023-38400 — WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2021-24719 — Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2014-7297 — (CVSS 10.0)