Enfold

enfold

Vulnerabilities:

10

Last Updated:

February 20, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-01-20
Title
Enfold <= 7.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-10-21
Title
Enfold < 7.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.3
CVSS
6.4 (medium)
Published
2025-02-24
Title
Enfold < 7.0 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
Fixed in
Fixed in 7.0
CVSS
5.3 (medium)
Published
2025-02-24
Title
Enfold < 7.0 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
Fixed in
Fixed in 7.0
CVSS
6.4 (medium)
Published
2024-08-29
Title
Enfold < 6.0.4 - Contributor+ Stored XSS via wrapper_class and class Parameters
Fixed in
Fixed in 6.0.4
CVSS
5.9 (medium)
Published
2024-06-20
Title
Enfold < 5.6.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.10
CVSS
6.1 (medium)
Published
2023-11-23
Title
Enfold < 5.6.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.5
CVSS
6.1 (medium)
Published
2021-09-06
Title
Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.8.4
CVSS
6.1 (medium)
Published
2018-01-27
Title
Enfold Theme < 4.2.1 - Rewrite Portfolio Permalink Structure & Information Disclosure
Fixed in
Fixed in 4.2.1
CVSS
n/a
Published
2014-10-02
Title
Enfold < 3.0.1 - Unspecified Issue
Fixed in
Fixed in 3.0.1
CVSS
n/a