AW
Product
Avada | Website Builder For WordPress & WooCommerce
by ThemeFusion · last CVE Oct 10, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch

Add Avada | Website Builder For WordPress & WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18431
9.8
1%
Aug 26
Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write
Affected: through 7.16
Showing 1