Avada Fusion Builder vulnerabilities

• avada fusion builder WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability CVE-2023-39309 8.5 HighMarch 28, 2024
• avada fusion builder WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-39311 7.1 HighMarch 27, 2024