VendorsEnvo Themesenvo_extraany version
Vulnerabilities

Envo Themes Envo Extra any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2024-32456
WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-17 · Modified
6.5EPSS 0.003
CVE-2024-4385
Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting
Published 2024-05-16 · Modified
6.4EPSS 0.003
CVE-2024-5645
Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Published 2024-06-07 · Modified
6.4EPSS 0.003
CVE-2024-10770
Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure
Published 2024-11-09 · Analyzed
4.3EPSS 0.003