Extension WordPress
Vulnérabilités Envo's Templates & Widgets for Elementor and WooCommerce
Cette page rassemble les failles publiées pour Envo's Templates & Widgets for Elementor and WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Envo's Templates & Widgets for Elementor and WooCommerce
7 fiches
Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 – Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting
The Envo's Templates & Widgets for Elementor and WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the Envo Tabs (and Off Canvas) widget's template rendering in versions up…
*-1.4.26
1.4.27
01/07/2026
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.19 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.4.19
1.4.20
24/10/2024
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.16 – Authenticated (Author+) Stored Cross-Site Scripting
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.4.16
1.4.17
16/08/2024
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.8 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.4.8
1.4.9
10/05/2024
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 – Missing Authorization via templates_ajax_request
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the templates_ajax_request function in all versions up to, and including, 1.4.4. This makes…
*-1.4.4
1.4.5
27/02/2024
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 – Cross-Site Request Forgery via ajax_theme_activation
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.4. This is due to missing or incorrect nonce validation on the ajax_theme_activation function. This…
*-1.4.4
1.4.5
27/02/2024
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 – Cross-Site Request Forgery via ajax_plugin_activation
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on the ajax_plugin_activation function. This…
*-1.4.4
1.4.5
27/02/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.