WordPress Vulnerability Scanner WPSec
Vulnerabilities / Envo's Templates & Widgets for Elementor and WooCommerce

Envo's Templates & Widgets for Elementor and WooCommerce vulnerabilities

Advisories WPSec published for Envo’s Templates & Widgets for Elementor and WooCommerce. Other sources may list more. Its attack surface: Envo's Templates & Widgets for Elementor and WooCommerce on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-07 WPSEC-2026-2727 Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.28 - Authenticated (Subscriber+) Missing Authorization to Non-Public Post Title Disclosure via etww_get_posts_by_query and etww_get_posts_title_by_id AJAX Actions Medium 4.3 2.0.0
2026-11-07 WPSEC-2026-2726 Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.28 - Unauthenticated Sensitive Information Exposure via etww_ajax_search AJAX Action Medium 5.3 2.0.0

License: CC BY 4.0