WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
Avada
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
Avada
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
Avada
Published
2017-04-26
Title
Avada Theme <= 5.1.4 - Stored Cross-Site Scripting (XSS) & CSRF
Slug
Avada
Published
2020-05-01
Title
Avada < 6.2.3 - Missing Permission Checks leading to Arbitrary Post Creation, Edition, Deletion and Stored XSS
Slug
Avada
Published
2021-09-13
Title
Avada < 7.4.2 - Reflected Cross-Site Scripting
Slug
Avada
Published
2021-09-10
Title
Avada < 7.4.2 - Stored Cross-Site Scripting
Slug
Avada
Published
2022-04-19
Title
Fusion Builder < 3.6.2 - Unauthenticated SSRF
Slug
Avada
Published
2022-10-20
Title
Avada < 7.8.2 - Arbitrary Plugin Instalation/Activation via CRSF
Slug
Avada
Published
2024-01-29
Title
Avada < 7.11.2 - Subscriber+ Portfolio Permalinks Creation
Slug
Avada
Published
2024-01-29
Title
Avada < 7.11.2 - Contributor+ SSRF
Slug
Avada
Published
2024-01-29
Title
Avada < 7.11.2 - Author+ Arbitrary File Upload via Zip Extraction
Slug
Avada
Published
2024-01-29
Title
Avada < 7.11.2 - Contributor+ Arbitrary File Upload
Slug
Avada
Published
2024-02-28
Title
Avada | Website Builder For WordPress & WooCommerce < 7.11.5 - Authenticated (Contributor+) Arbitrary File Upload
Slug
Avada
Published
2024-03-20
Title
Avada < 7.11.7 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
Slug
Avada
Published
2024-03-20
Title
Avada < 7.11.7 - Authenticated (Admin+) SQL Injection via entry
Slug
Avada
Published
2024-03-20
Title
Avada < 7.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
Avada
Published
2024-03-20
Title
Avada < 7.11.7 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
Slug
Avada
Published
2024-12-11
Title
Avada < 7.11.11 - Cross-Site Request Forgery
Slug
Avada
Published
2025-01-24
Title
Avada < 7.11.11 - Missing Authorization
Slug
Avada
Published
2025-02-12
Title
Avada Theme < 7.11.14 - Unauthenticated Arbitrary Shortcode Execution
Slug
Avada
Published
2025-10-03
Title
Avada <= 7.13.2 - Missing Authorization