Skip to content
OpenAdvisories

Product · ThemeFusion

Avada | Website Builder For WordPress & WooCommerce

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-18431 Public exploit

    Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

    The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input val…

    ThemeFusion Avada (Fusion) Builder Avada | Website Builder For WordPress & WooCommerce Web / CMS
  • High 7.3
    CVE-2024-13346 Public exploit

    Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

    The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly va…

    ThemeFusion Avada | Website Builder For WordPress & WooCommerce Web / CMS