370 matches found
EUVD-2024-50889
Malicious code in bioql PyPI...
EUVD-2022-45099
Malicious code in bioql PyPI...
EUVD-2023-43039
Malicious code in bioql PyPI...
EUVD-2023-43620
Malicious code in bioql PyPI...
WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Avada versions = 7.13.2...
Exploit for Server-Side Request Forgery in Fusion_Builder_Project Fusion_Builder
CVE-2022-1386 – Fusion Builder Example: bash python3...
CVE-2025-6747
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusionmap' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6747
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusionmap' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6747 Avada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusionmap' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6747 Avada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusionmap' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6747
CVE-2025-6747 affects the Avada (Fusion) Builder plugin for WordPress prior to and including 3.12.1. The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin’s fusion_map shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitatio...
PT-2025-29709 · WordPress · Avada (Fusion) Builder
Name of the Vulnerable Software and Affected Versions: Avada Fusion Builder plugin for WordPress versions up to and including 3.12.1 Description: The Avada Fusion Builder plugin for WordPress is susceptible to Stored Cross-Site Scripting through the fusion map shortcode. Insufficient input...
WordPress plugin Avada Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
CVE-2024-2311
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.11.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2024-1668
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 7.11.5 via the form entries page. This makes it possible for authenticated attackers, with contributor access and above, to view the contents...
CVE-2024-54357
Cross-Site Request Forgery CSRF vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through = 7.11.10...
CVE-2024-12477
The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...
CVE-2024-12335
The Avada Fusion Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handleclonepost function and the 'fusionblog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for...