Advisories · Technology
envato Template Kit – Import.
Every CVE that names envato Template Kit – Import among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
- envato Template Kit – Import
- Path traversal
- CVSS 6.4 Medium
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
- envato Template Kit – Import
- Unrestricted file upload
- CVSS 8.8 High
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
- envato Template Kit – Import
- Envato Elements – Photos & Elementor Templates
- Unrestricted file upload