Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Avada (Fusion) Builder — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Avada (Fusion) Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: themefusion

CVE IDTitleCVSSSeverityPublished
CVE-2026-1541 Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Reference CWE-639 4.3 Medium2026-04-15
CVE-2026-1509 Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Limited Arbitrary WordPress Action Execution CWE-94 5.4 Medium2026-04-15
CVE-2025-6747 Avada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2025-07-16
CVE-2025-1665 Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-04-01
CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution CWE-94 7.3 High2025-02-13
CVE-2024-12477 Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets CWE-79 6.4 Medium2025-01-22
CVE-2024-12335 Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure CWE-639 4.3 Medium2024-12-25
CVE-2024-5628 Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode CWE-79 6.4 Medium2024-09-13

All 8 known CVE vulnerabilities affecting Avada (Fusion) Builder with full Chinese analysis, references, and POCs where available.