| CVE-2026-115346 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in…
|
8.1
Élevée
|
30 oct. 2026 |
| CVE-2026-97340 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting…
|
6.4
Moyenne
|
10 oct. 2026 |
| CVE-2026-84925 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site…
|
6.1
Moyenne
|
2 oct. 2026 |
| CVE-2026-18431 |
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when…
|
9.8
Critique
|
26 août 2026 |
| CVE-2024-13346 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode…
|
7.3
Élevée
|
13 févr. 2025 |
| CVE-2024-2311 |
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions…
|
6.4
Moyenne
|
9 avr. 2024 |
| CVE-2024-2344 |
The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and…
|
7.2
Élevée
|
9 avr. 2024 |
| CVE-2024-2340 |
The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…
|
5.3
Moyenne
|
9 avr. 2024 |
| CVE-2024-2343 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Server-Side Request Forgery…
|
6.4
Moyenne
|
9 avr. 2024 |
| CVE-2024-1668 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information…
|
6.5
Moyenne
|
13 mars 2024 |
| CVE-2024-1468 |
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads…
|
8.8
Élevée
|
29 févr. 2024 |
| CVE-2020-36711 |
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up…
|
6.4
Moyenne
|
7 juin 2023 |