Vulnerabilities in Kriesi
7 resultsCVE-2023-38400HIGHWordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-13693MEDIUMEnfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.phpEPSS 0.3%CVE-2024-5061MEDIUMEnfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class ParametersEPSS 0.3%CVE-2024-13695MEDIUMEnfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_idEPSS 0.2%CVE-2025-68900MEDIUMWordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-48869HIGHWordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-66053MEDIUMWordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%