Plugin icon

Envo's Templates & Widgets for Elementor and WooCommerce

envo-elementor-for-woocommerce

Vulnerabilities:

7

Last Updated:

August 20, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-07-01
Title
Envo's Templates & Widgets for Elementor and WooCommerce < 1.4.27 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting
Fixed in
Fixed in 1.4.27
CVSS
2.7 (low)
Published
2024-10-24
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.20
CVSS
6.4 (medium)
Published
2024-08-16
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.17 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.17
CVSS
6.4 (medium)
Published
2024-05-10
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.9
CVSS
6.4 (medium)
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Theme Activation via CSRF
Fixed in
Fixed in 1.4.5
CVSS
4.3 (medium)
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Plugin Activation via CSRF
Fixed in
Fixed in 1.4.5
CVSS
4.3 (medium)
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Subscriber+ Template Creation
Fixed in
Fixed in 1.4.5
CVSS
4.3 (medium)