Template Kit – Import

Template Kit – Import has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (100%).

Every one of the 2 issues recorded for Template Kit – Import has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Template Kit – Import is installed on roughly 400,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSHigh

7.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Template Kit – Import vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-4330

Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records


2024-04-01 00:00	Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload Template Kit <= 1.0.14	`CVE-2024-2334`	6.4 Medium	Colin Xu	Yes
2021-10-21 00:00	Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload Template Kit <= 1.0.13	`CVE-2021-4330`	8.8 High	Chloe Chamberland	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.0.16

Template Kit – Import

Author

envato

3.4(16)

68/100

Last Updated

2024-08-01 (2y ago)

Active Installs

400,000+

Downloads

1,478,607

Requires WP

5.3+

Requires PHP

5.6+

Tested up to

WP 6.4.10

Created

2020-01-09 (7y ago)

A Template Kit is a collection of pre-designed starter templates for a WordPress Site Builder that share a cohesive visual style. You can use this plugin to Import Template kits for Elementor. Once this plugin is activated go to “Tools” > “Template Kit” to begin importing.

View on WordPress.org