| CVE-2026-84938 |
Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook
|
7.2
Élevée
|
10 nov. 2026 |
| CVE-2026-104729 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_index,…
|
6.4
Moyenne
|
28 oct. 2026 |
| CVE-2026-97471 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…
|
5.3
Moyenne
|
14 oct. 2026 |
| CVE-2026-97670 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
|
9.1
Critique
|
10 oct. 2026 |
| CVE-2026-16654 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode…
|
6.4
Moyenne
|
28 août 2026 |
| CVE-2026-18431 |
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when…
|
9.8
Critique
|
26 août 2026 |
| CVE-2026-12536 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’…
|
6.4
Moyenne
|
13 juil. 2026 |
| CVE-2026-8713 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
|
9.1
Critique
|
19 juin 2026 |
| CVE-2026-1543 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes…
|
6.4
Moyenne
|
21 mai 2026 |
| CVE-2026-6279 |
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP…
|
9.8
Critique
|
21 mai 2026 |
| CVE-2026-4782 |
The Avada Builder plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.15.2…
|
6.5
Moyenne
|
13 mai 2026 |
| CVE-2026-4798 |
The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘product_order’ parameter in…
|
7.5
Élevée
|
13 mai 2026 |
| CVE-2026-1509 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up…
|
5.4
Moyenne
|
15 avr. 2026 |
| CVE-2026-1541 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…
|
4.3
Moyenne
|
15 avr. 2026 |
| CVE-2025-6747 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
16 juil. 2025 |
| CVE-2025-1665 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's…
|
6.4
Moyenne
|
1 avr. 2025 |
| CVE-2024-13345 |
The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…
|
7.3
Élevée
|
13 févr. 2025 |
| CVE-2024-12477 |
The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all…
|
6.4
Moyenne
|
22 janv. 2025 |
| CVE-2024-12335 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…
|
4.3
Moyenne
|
25 déc. 2024 |
| CVE-2024-5628 |
The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site…
|
6.4
Moyenne
|
13 sept. 2024 |