Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Envo's Templates & Widgets for Elementor and WooCommerce — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Envo's Templates & Widgets for Elementor and WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: envothemes

CVE IDTitleCVSSSeverityPublished
CVE-2026-11600 Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting CWE-862 4.3 Medium2026-07-02
CVE-2024-0767 Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation CWE-352 4.3 Medium2024-02-28
CVE-2024-0766 Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request CWE-284 4.3 Medium2024-02-28
CVE-2024-0768 Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation CWE-352 4.3 Medium2024-02-28

All 4 known CVE vulnerabilities affecting Envo's Templates & Widgets for Elementor and WooCommerce with full Chinese analysis, references, and POCs where available.