Log in Start free

Kriesi

Products

ProductCVEsExploitedLatest
Enfold4–Sep 3, 2026
Enfold - Responsive Multi-Purpose Theme4–Feb 25, 2025

Exploited and recent CVEs

  • CVE-2026-84815 Medium 5.8 WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-48869 High 7.1 WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68900 Medium 6.5 WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-66053 Medium 6.5 WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-13695 Medium 6.4 Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id 0.3%
  • CVE-2024-13693 Medium 5.3 Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php 0.3%
  • CVE-2024-5061 Medium 6.4 Enfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters 0.3%
  • CVE-2023-38400 High 7.1 WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS) 0.4%