Login Request a demo
AB
Product
Avada Builder
by Theme-fusion · last CVE Apr 1, 2025
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Avada Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1665
5.4
0%
Apr 1
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 3.11.14…
Affected: through 3.11.14
CVE-2024-12477
5.4
0%
Jan 22
The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient…
Affected: through 3.11.11
CVE-2024-12335
4.3
0%
Dec 25
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
Affected: through 3.11.12
Showing 3