Avada (Fusion) Builder vulnerabilities
7 known vulnerabilities in Avada (Fusion) Builder from ThemeFusion. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Avada (Fusion) Builder: Improper Neutralization of Input During Web Page Generation
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook → Media Upload Chain (ID3 Metadata / html_attributes) in all versions up to, and including, 3.16.1 due to insufficient i
- 9.1 Critical severity
Avada (Fusion) Builder: Improper Control of Generation of Code
The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken fr
- 9.8 Critical severity
Avada (Fusion) Builder: Missing Authorization
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input vali
- 9.1 Critical severity
Avada (Fusion) Builder: Improper Limitation of a Pathname to a Restricted Directory
The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions up to, and including, 3.15.3. This makes it possible for unauthenticated attack
- 9.8 Critical severity
Avada (Fusion) Builder: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2. This is due to the `wp_conditional_tags` case in `Fusion_Builder_Conditional_Rende
- 7.5 High severity
Avada (Fusion) Builder: Improper Neutralization of Special Elements used in an SQL Command
The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘product_order’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th
- 9.8 Critical severity
Avada (Fusion) Builder: Improper Control of Generation of Code
The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_short