Template Kit – Import
Template Kit – Import has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (67%). Other recurring categories include Path Traversal.
Every one of the 3 issues recorded for Template Kit – Import has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Template Kit – Import is installed on roughly 400,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.13.
CVE-2021-4330Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
Read the full analysisVulnerability Records
Template Kit – Import
Author
envato
A Template Kit is a collection of pre-designed starter templates for a WordPress Site Builder that share a cohesive visual style. You can use this plugin to Import Template kits for Elementor. Once this plugin is activated go to “Tools” > “Template Kit” to begin importing.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C