Webenvo
Webenvo has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).
The one issue recorded for Webenvo has a vendor fix available, so running the current release closes it.
All of these findings were reported by Denver Jackson. Webenvo is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-39589Webenvo <= 0.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
Read the full analysisVulnerability Records

Webenvo
Author
A WP Life
Webenvo is made to be the fastest. with the latest mechanisms running in advanced website designs, with high-quality code optimized for performance. the theme perfectly suited for Business, Blog, Business Promotion, Market, Sports, Electrician, Industries, Newspaper, Freelancer, Lawyer, Architect, Appointment, Cooming Soon, Posts Website, Education, Gaming Hub, School, SEO, Medical, Construction, Wedding, Music, Food, Cafe, Hotel, Fashion, Online Shop, Interior Design, Building Design, Decoration, Donstruction, Dorporate, Agency, Pet Care, Beauty & Spa Salons, Photography, Gym Fitness, Travel Agency, and approx all category frontend can be easily developed with the supported environment, You will have lots of options to consider. This theme supports the best Elementor page builder to create, edit and updates page designs as per the requirement. As well as it has some exotic features like customization and clean code, advanced typography, sticky menu, logo upload, header image, Latest Bootstrap framework, built with SEO in mind, and theme info area besides being Mobile-ready, also translation ready (WPML, Polylang) and it's built to be beautiful on all screen sizes with multiple homepage sections like slider, service, info, callout, testimonial.Theme Webenvo is fully responsive and compatible with popular WordPress plugins like Page Builder, Beaver Builder, Brizy, Visual Composer, Divi, SiteOrigin, Gutenberg, Block-Enabled, WooCommerce, WPML, Yoast SEO, Jetpack, Contact Form 7, Mailchimp for WordPress, bbPress, Demo Importer, WPForms and more. Whether you’re running an online shopping store or setting up your website, Basically Webenvo fulfills approx all your website needs, guiding you through the digital landscape and ensuring you never go astray.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C