Vulnerabilities in Envato

4 results

CVE-2021-4330HIGHEnvato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.5%CVE-2024-2334MEDIUMTemplate Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template uploadEPSS 0.4%CVE-2024-56275MEDIUMWordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.4%CVE-2024-37550MEDIUMWordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%