Plugin icon

Envo Extra

envo-extra

Vulnerabilities:

8

Last Updated:

May 8, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
Envo Extra < 1.9.14 - Missing Authorization
Fixed in
Fixed in 1.9.14
CVSS
4.3 (medium)
Published
2025-12-05
Title
Envo Extra < 1.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.12
CVSS
6.4 (medium)
Published
2025-05-07
Title
Envo Extra < 1.9.10 - Missing Authorization
Fixed in
Fixed in 1.9.10
CVSS
4.3 (medium)
Published
2024-11-08
Title
Envo Extra < 1.9.4 - Authenticated (Contributor+) Post Disclosure
Fixed in
Fixed in 1.9.4
CVSS
4.3 (medium)
Published
2024-06-06
Title
Envo Extra < 1.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Fixed in
Fixed in 1.8.25
CVSS
6.4 (medium)
Published
2024-05-15
Title
Envo Extra < 1.8.17 - Authenticated (Contributor+) Cross-Site Scripting
Fixed in
Fixed in 1.8.17
CVSS
6.4 (medium)
Published
2024-04-15
Title
Envo Extra < 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.12
CVSS
6.4 (medium)
Published
2023-10-17
Title
Envo Extra < 1.8.4 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.4
CVSS
4.3 (medium)