| CVE-2026-115346 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in…
|
8.1
High
|
Oct 30, 2026 |
| CVE-2026-97340 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting…
|
6.4
Medium
|
Oct 10, 2026 |
| CVE-2026-84925 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site…
|
6.1
Medium
|
Oct 2, 2026 |
| CVE-2026-18431 |
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when…
|
9.8
Critical
|
Aug 26, 2026 |
| CVE-2024-13346 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode…
|
7.3
High
|
Feb 13, 2025 |
| CVE-2024-2311 |
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions…
|
6.4
Medium
|
Apr 9, 2024 |
| CVE-2024-2344 |
The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and…
|
7.2
High
|
Apr 9, 2024 |
| CVE-2024-2340 |
The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…
|
5.3
Medium
|
Apr 9, 2024 |
| CVE-2024-2343 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Server-Side Request Forgery…
|
6.4
Medium
|
Apr 9, 2024 |
| CVE-2024-1668 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information…
|
6.5
Medium
|
Mar 13, 2024 |
| CVE-2024-1468 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads…
|
8.8
High
|
Feb 29, 2024 |
| CVE-2020-36711 |
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up…
|
6.4
Medium
|
Jun 7, 2023 |