Skip to contentThemefusion Avada | Website Builder For Wordpress & Woocommerce vulnerabilities
- themefusion avada | website builder for wordpress & woocommerceAvada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload FieldCVE-2026-1153468.1 High
- themefusion avada | website builder for wordpress & woocommerceAvada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'author_facebook' User Profile FieldCVE-2026-973406.4 Medium
- themefusion avada | website builder for wordpress & woocommerceAvada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' ParameterCVE-2026-849256.1 Medium
- themefusion avada (fusion) builder, avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File WriteCVE-2026-18431Public exploit9.8 Critical
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-13346Public exploit7.3 High
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-23116.4 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entryCVE-2024-23447.2 High
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory ListingCVE-2024-2340EPSS 28.0%5.3 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_actionCVE-2024-23436.4 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form EntriesCVE-2024-16686.5 Medium
- avada website builder, theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +2 moreAvada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File UploadCVE-2024-14688.8 High
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 6.2.2 - Authenticated (Contributor+) Cross-Site ScriptingCVE-2020-367116.4 Medium