Enfold

enfold

Vulnerabilities:

12

Last Updated:

October 6, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-09-03
Title
Enfold - Responsive Multi-Purpose Theme < 8.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 8.1
CVSS
7.2 (high)
Published
2026-06-01
Title
Enfold - Responsive Multi-Purpose Theme < 7.1.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.1.5
CVSS
6.1 (medium)
Published
2026-01-20
Title
Enfold < 7.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.4
CVSS
5.5 (medium)
Published
2025-10-21
Title
Enfold < 7.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.3
CVSS
6.4 (medium)
Published
2025-02-24
Title
Enfold < 7.0 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
Fixed in
Fixed in 7.0
CVSS
6.4 (medium)
Published
2025-02-24
Title
Enfold < 7.0 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
Fixed in
Fixed in 7.0
CVSS
5.3 (medium)
Published
2024-08-29
Title
Enfold < 6.0.4 - Contributor+ Stored XSS via wrapper_class and class Parameters
Fixed in
Fixed in 6.0.4
CVSS
5.9 (medium)
Published
2024-06-20
Title
Enfold < 5.6.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.10
CVSS
6.1 (medium)
Published
2023-11-23
Title
Enfold < 5.6.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.5
CVSS
6.1 (medium)
Published
2021-09-06
Title
Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.8.4
CVSS
6.1 (medium)
Published
2018-01-27
Title
Enfold Theme < 4.2.1 - Rewrite Portfolio Permalink Structure & Information Disclosure
Fixed in
Fixed in 4.2.1
CVSS
n/a
Published
2014-10-02
Title
Enfold < 3.0.1 - Unspecified Issue
Fixed in
Fixed in 3.0.1
CVSS
n/a