CVE-2025-64634

<= 7.13.1

Missing Authorization vulnerability in ThemeFusion Avada allows Accessing Functionality Not Properly Constrained by ACLs.Thi

5.3MEDIUM

CVE-2024-13346

< 7.11.14

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all

7.3HIGH

CVE-2024-54357

< 7.11.11

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.

4.3MEDIUM

CVE-2024-5628

< 7.11.9

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

6.4MEDIUM

CVE-2023-39312

< 7.11.2

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

9.1CRITICAL

CVE-2023-39922

< 7.11.2

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

4.3MEDIUM

CVE-2024-2344

< 7.11.7

The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and including, 7.11.

7.2HIGH

CVE-2024-2343

< 7.11.7

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Server-Side Request Forgery in all ve

6.4MEDIUM

CVE-2024-2340

< 7.11.7

The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the

5.3MEDIUM

CVE-2024-2311

< 7.11.7

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and

6.4MEDIUM

CVE-2023-39309

<= 3.11.1

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.T

8.5HIGH

CVE-2023-39313

< 7.11.2

Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

7.7HIGH

CVE-2023-39311

<= 3.11.1

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through

7.1HIGH

CVE-2023-39307

< 7.11.2

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11

8.5HIGH

CVE-2024-1668

< 7.11.6

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information Exposure in ver

6.5MEDIUM

CVE-2024-1468

< 7.11.5

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing

8.8HIGH

CVE-2020-36711

<= 6.2.3

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up to, and i

6.4MEDIUM

CVE-2022-41996

<= 7.8.1

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbit

8.8HIGH

CVE-2022-1386

< 7.6.2

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could

9.8CRITICAL

CVE-2017-18607

< 5.1.5

The avada theme before 5.1.5 for WordPress has CSRF.

8.8HIGH

CVE-2017-18606

< 5.1.5

The avada theme before 5.1.5 for WordPress has stored XSS.

6.1MEDIUM