Known Vulnerabilities for Template Kit Import by Envato
Listed below are 10 of the newest known vulnerabilities associated with "Template Kit Import" by "Envato".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100641 json | SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list m... | Not Provided | 2026-09-26 | 2026-10-05 |
| CVE-2026-100190 json | The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). Use... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-96824 json | Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-94047 json | A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemp... | Not Provided | 2026-09-20 | 2026-09-22 |
| CVE-2026-91154 json | Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, r... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-84724 json | An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The syste... | Not Provided | 2026-09-23 | 2026-09-26 |
| CVE-2026-81910 json | Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-81429 json | The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-impo... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-77751 json | A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 ... | Not Provided | 2026-08-21 | 2026-08-25 |
| CVE-2026-73651 json | TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, ... | Not Provided | 2026-08-13 | 2026-08-14 |