CVE-2023-39312 Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1

Description

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Affected products and versions

Product	Affected versions	Fixed in
Avada 7.11	earliest → 7.11.1	No fix stated
avada 7.11	earliest → 7.11.1	No fix stated

Other CVEs of Avada

The 9 CVEs of Avada →

CVE-2026-12256 Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object… 8.8 High CVE-2025-58922 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue… 4.3 Medium CVE-2025-64634 Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained… 5.3 Medium CVE-2025-24748 Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10 5.3 Medium