Vulners
Lucene search
CVE-2024-5628 Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2024-5628 | 13 Sep 202406:15 | β | attackerkb |
 | CVE-2024-5628 | 13 Sep 202408:45 | β | circl |
 | WordPress plugin Avada θ·¨η«θζ¬ζΌζ΄ | 13 Sep 202400:00 | β | cnnvd |
 | CVE-2024-5628 | 13 Sep 202405:30 | β | cve |
 | EUVD-2024-46809 | 3 Oct 202520:07 | β | euvd |
 | CVE-2024-5628 | 13 Sep 202406:15 | β | nvd |
 | WordPress Fusion Builder Plugin <= 3.11.9 is vulnerable to Cross Site Scripting (XSS) | 13 Sep 202400:00 | β | patchstack |
| WordPress Avada | Website Builder For WordPress & eCommerce plugin <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode vulnerability | 13 Sep 202406:01 | β | patchstack |
 | PT-2024-36778 Β· WordPress Β· Avada | 12 Sep 202400:00 | β | ptsecurity |
 | CVE-2024-5628 | 23 May 202508:30 | β | redhatcve |
10
[
{
"vendor": "themefusion",
"product": "Avada (Fusion) Builder",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "3.11.9",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Data
Build on a solid foundation withΒ Vulners data
WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data
Api
Power your application withΒ Vulners API
The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access
App
Assess and manage vulnerabilities withΒ VulnersΒ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Apr 2026 17:02Current
CVSS 3.16.4
EPSS0.00489