Vulnerabilities in Kriesi

7 results

Vexday analysis

Kriesi apresenta footprint modesto de 7 vulnerabilidades catalogadas, sem nenhuma sob exploração ativa conhecida ou classificação crítica no CVSS. A fraqueza dominante é cross-site scripting (CWE-79), típica de aplicações web, com apenas 1 CVE publicado nos últimos 90 dias, indicando risco estável e de baixa urgência operacional.

CVE-2023-38400HIGHWordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-13693MEDIUMEnfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.phpEPSS 0.3%CVE-2024-5061MEDIUMEnfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class ParametersEPSS 0.3%CVE-2024-13695MEDIUMEnfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_idEPSS 0.2%CVE-2025-68900MEDIUMWordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-66053MEDIUMWordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-48869HIGHWordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%