Envato

Products

Product	CVEs	Exploited	Latest
Template Kit – Import	3	–	Sep 30, 2026
Envato Elements	1	–	Jan 7, 2025
Envato Elements – Photos & Elementor Templates	1	–	Mar 7, 2023
Template Kit – Export	1	–	Jul 21, 2024

CVE-2026-96824 Medium 6.8 WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability 0.4%
CVE-2024-56275 Medium 4.1 WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability 0.4%
CVE-2024-37550 Medium 5.9 WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-2334 Medium 6.4 Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload 0.4%
CVE-2021-4330 High 8.8 Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload 1.5%
CVE-2021-4330 High 8.8 Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload 1.5%