Avada

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Avada records in CISA KEV

No Avada vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fusion Builder 2 records MEDIUM

Records

2 records

TI-2023-20454 CVE-2023-39311 · GHSA-mch6-3hjm-3qj2

WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00261 Published 2024-03-27 No fix listed CWE-352

TI-2023-20452 CVE-2023-39309 · GHSA-pv3w-w9gj-7hf3

WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00736 Published 2024-03-28 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0