Vulnerability index

Browse CVEs

20 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Avada MEDIUM 5.3
CVE-2025-64634

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ava…

Fix: after 7.13.1
Fix from $1,600 2025-12-16
Avada Builder MEDIUM 5.4
CVE-2025-1665

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions u…

Fix: after 3.11.14
Fix from $1,600 2025-04-01
Avada CRITICAL 9.8
CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…

Fix: 7.11.14+
Fix from $2,300 2025-02-13
Avada Builder CRITICAL 9.8
CVE-2024-13345

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to t…

Fix: 3.11.14+
Fix from $2,300 2025-02-13
Avada Builder MEDIUM 5.4
CVE-2024-12477

The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including,…

Fix: after 3.11.11
Fix from $1,600 2025-01-22
Avada MEDIUM 5.4
CVE-2024-5628

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusion_butto…

Fix: 7.11.9+
Fix from $1,600 2024-09-13
Avada HIGH 8.8
CVE-2023-39312

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Fix: 7.11.2+
Fix from $1,950 2024-06-19
Avada HIGH 8.8
CVE-2023-39922

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Fix: 7.11.2+
Fix from $1,950 2024-06-19
Avada HIGH 7.2
CVE-2024-2344

The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and including, 7.11.6 due to insufficie…

Fix: 7.11.7+
Fix from $1,950 2024-04-09
Avada MEDIUM 6.4
CVE-2024-2343

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and i…

Fix: 7.11.7+
Fix from $1,600 2024-04-09
Avada MEDIUM 5.3
CVE-2024-2340EPSS 28%

The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-content/uploa…

Fix: 7.11.7+
Fix from $1,600 2024-04-09
Avada MEDIUM 5.4
CVE-2024-2311

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.11.6 d…

Fix: 7.11.7+
Fix from $1,600 2024-04-09
Avada HIGH 7.7
CVE-2023-39313

Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Fix: 7.11.2+
Fix from $1,950 2024-03-28
Avada HIGH 8.8
CVE-2023-39307

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Fix: 7.11.2+
Fix from $1,950 2024-03-26
Avada MEDIUM 6.5
CVE-2024-1668

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information Exposure in versions up to and inc…

Fix: 7.11.6+
Fix from $1,600 2024-03-13
Avada HIGH 8.8
CVE-2024-1468

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validati…

Fix: 7.11.5+
Fix from $1,950 2024-02-29
Avada MEDIUM 5.4
CVE-2020-36711

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up to, and including, 6.2.3 due…

Fix: after 6.2.3
Fix from $1,600 2023-06-07
Avada HIGH 8.8
CVE-2022-41996

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin install…

Fix: after 7.8.1
Fix from $1,950 2022-10-27
Avada HIGH 8.8
CVE-2017-18607

The avada theme before 5.1.5 for WordPress has CSRF.

Fix: 5.1.5+
Fix from $1,950 2019-09-10
Avada MEDIUM 6.1
CVE-2017-18606

The avada theme before 5.1.5 for WordPress has stored XSS.

Fix: 5.1.5+
Fix from $1,600 2019-09-10