Skip to content
Sign in
8.5 High

CVE-2023-39307 Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a…

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Affected products and versions

Product Affected versions Fixed in
Avada 7.11 earliest → 7.11.1 No fix stated
avada 7.11 earliest → 7.11.1 No fix stated

Other CVEs of Avada

The 9 CVEs of Avada →
CVE-2026-12256 Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object… 8.8 High CVE-2025-58922 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue… 4.3 Medium CVE-2025-64634 Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained… 5.3 Medium CVE-2025-24748 Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10 5.3 Medium
Track this CVE