Enfold@* Security Vulnerabilities and Issues — Enfold@* CVE List

Lucene search

KriesiEnfold*

4 matches found

CVE•added 2025/02/25 10:15 a.m.•87 views

CVE-2024-13693

The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive informati...

5.3CVSS6.5AI score0.00086EPSS

CVE•added 2021/10/11 11:15 a.m.•64 views

CVE-2021-24719

The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.

6.1CVSS5.9AI score0.00717EPSS

Web

CVE•added 2024/07/22 10:15 a.m.•61 views

CVE-2024-37199

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kriesi.At Enfold allows Reflected XSS.This issue affects Enfold: from n/a through 5.6.9.

7.1CVSS7AI score0.00121EPSS

CVE•added 2025/02/25 10:15 a.m.•59 views

CVE-2024-13695

The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_id' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originat...

6.4CVSS6.6AI score0.00043EPSS