📦 Enfold

This CVE describes a reflected cross-site scripting (XSS) vulnerability in the Enfold WordPress theme. Attackers can inject malicious scripts via user input that gets reflected in web pages without pr...

This reflected cross-site scripting (XSS) vulnerability in the Enfold WordPress theme allows attackers to inject malicious scripts into web pages by manipulating input parameters. When exploited, it c...

The Enfold WordPress theme has an authorization bypass vulnerability that allows unauthenticated attackers to export all theme settings. This can expose sensitive API keys and tokens stored in the the...

This vulnerability allows authenticated WordPress users with Contributor-level access or higher to inject malicious scripts into web pages using the Enfold theme. The scripts execute whenever users vi...