AV
Product
Avada
by Theme-fusion · last CVE Dec 16, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 9Low 0
Watch

Add Avada to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13346
9.8
2%
Feb 13
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13
Affected: before 7.11.14
CVE-2022-1386
9.8
71%
May 16
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests
Affected: before 7.6.2
Showing 2