Description
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeFusion | Avada | ≤ 7.11.1 | — |
High · 8.5
CVE-2023-39307
EUVD-2023-43039GHSA-fg4p-3qhr-755g
WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability
Published Mar 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack