Known vulnerabilities in Avada
Vendor:
ThemeFusion
Software:
Avada
Software CPE:
cpe:2.3:a:themefusion:avada_responsive_multi-purpose_theme:*:*:*:*:*:*:*:*
Website:
https://theme-fusion.com/
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
7.9.2
7.9.1
7.9
7.8
7.7.1
7.7
7.6.2
7.6.1
7.6
7.5
7.4.2
7.4.1
7.4
7.3.1
7.3
7.2.1
7.2
7.1.2
7.1.1
7.1
7.0.2
7.0.1
7.0
6.2.2
6.2.1
6.2
6.1.2
6.1.1
6.1
6.0.3
6.0.2
6.0.1
6.0
5.15.3
5.15
5.14
5.13.1
5.12
5.11.2
5.10.1
5.10
5.9.1
5.9
5.8.2
5.8.1
5.8
5.7.2
5.7.1
5.7
5.6.3
5.6.2
5.6.1
5.6
5.5.2
5.5.1
5.5
5.4.2
5.4.1
5.4
5.3.1
5.3
5.2.3
5.2.2
5.2.1
5.2
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0
4.0.3
4.0.2
4.0.1
4.0
3.9.4
3.9.3
3.9.2
3.9.1
3.9
3.8.8
3.8.7
3.8.6.1
3.8.6
3.8.5
3.8.4
3.8.3
3.8.2
3.8.1
3.8
3.7.4
3.7.3
3.7.2
3.7.1
3.7
3.6.2
3.6.1
3.6
3.5.3
3.5.2
3.5.1
3.4.3
7.8.2
7.8.1
6.2.3
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72689 - Server-Side Request Forgery (SSRF) CVE-2022-1386 |
CWE-918 | Medium | 7.6.2 | 01.03.2023 |
SB2023030134 SB2023030135 |
||
| #VU68702 - Cross-Site Request Forgery (CSRF) CVE-2022-41996 |
CWE-352 | Low | 7.8.2 | 25.10.2022 |
SB2022102525 |
||
| #VU27492 - Permissions, Privileges, and Access Controls |
CWE-264 | Medium | 6.2.3 | 04.05.2020 |
SB2020050409 |
||
| #VU27491 - Permissions, Privileges, and Access Controls |
CWE-264 | Medium | 6.2.3 | 04.05.2020 |
SB2020050409 |
||
| #VU27490 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 6.2.3 | 04.05.2020 |
SB2020050409 |