Description
Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeFusion | Avada | ≤ 7.11.1 | — |
Critical · 9.1
CVE-2023-39312
EUVD-2023-43044GHSA-wcwp-h8hq-8j75
WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability
Published Jun 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack