Lucene search

K
KriesiEnfold

7 matches found

CVE
CVE
added 2023/11/30 5:15 p.m.87 views

CVE-2023-38400

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold - Responsive Multi-Purpose Theme allows Reflected XSS.This issue affects Enfold - Responsive Multi-Purpose Theme: from n/a through 5.6.4.

7.1CVSS6.7AI score0.00193EPSS
CVE
CVE
added 2025/02/25 10:15 a.m.84 views

CVE-2024-13693

The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive informati...

5.3CVSS6.5AI score0.00068EPSS
CVE
CVE
added 2021/10/11 11:15 a.m.63 views

CVE-2021-24719

The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.

6.1CVSS5.9AI score0.00717EPSS
CVE
CVE
added 2024/07/22 10:15 a.m.59 views

CVE-2024-37199

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kriesi.At Enfold allows Reflected XSS.This issue affects Enfold: from n/a through 5.6.9.

7.1CVSS7AI score0.00077EPSS
CVE
CVE
added 2025/02/25 10:15 a.m.58 views

CVE-2024-13695

The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_id' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originat...

6.4CVSS6.6AI score0.00034EPSS
CVE
CVE
added 2024/08/30 4:15 a.m.44 views

CVE-2024-5061

The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wrapper_class’ and 'class' parameters in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

6.4CVSS5.6AI score0.00064EPSS
CVE
CVE
added 2014/10/13 10:55 a.m.38 views

CVE-2014-7297

Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors.

10CVSS6.8AI score0.01537EPSS