Skip to content

Known vulnerabilities in theme-fusion avada

Is your version affected?

CVE Summary Score Published
CVE-2023-39312 Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1 9.1 Critical Jun 19, 2024
CVE-2024-2344 The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and… 7.2 High Apr 9, 2024
CVE-2024-2340 The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,… 5.3 Medium Apr 9, 2024
CVE-2023-39307 Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a… 8.5 High Mar 26, 2024