Lucene search
K

18 matches found

CNNVD
CNNVD
added 2026/04/22 12:0 a.m.3 views

WordPress plugin Avada 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

4.3CVSS5.7AI score0.00017EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-46809

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00489EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-9122

Malicious code in bioql PyPI...

6.4CVSS7.3AI score0.00239EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 6:36 a.m.4 views

CVE-2024-12335

The Avada Fusion Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handleclonepost function and the 'fusionblog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for...

4.3CVSS6.7AI score0.00114EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.2 views

PT-2025-14028 · WordPress · Avada (Fusion) Builder

Name of the Vulnerable Software and Affected Versions: Avada Fusion Builder plugin for WordPress versions up to, and including, 3.11.14 Description: The issue is related to Stored Cross-Site Scripting via several of the plugin's shortcodes due to insufficient input sanitization and output escapin...

6.4CVSS6.2AI score0.00239EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.2 views

WordPress plugin Avada 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS6.6AI score0.00239EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.3 views

WordPress plugin Avada | Website Builder For WordPress & WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

9.8CVSS9.2AI score0.47852EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.1 views

WordPress plugin Avada 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

4.3CVSS6.2AI score0.00199EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/09/13 6:15 a.m.2 views

CVE-2024-5628

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusionbutton shortcode in all versions up to, and including, 3.11.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS6AI score0.00489EPSS
Exploits0References4
OSV
OSV
added 2024/09/13 6:15 a.m.2 views

CVE-2024-5628

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusionbutton shortcode in all versions up to, and including, 3.11.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

5.4CVSS5.9AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/13 5:30 a.m.9 views

CVE-2024-5628 Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode

The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusionbutton shortcode in all versions up to, and including, 3.11.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS5.9AI score0.00489EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/09/13 12:0 a.m.0 views

WordPress plugin Avada 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.7AI score0.00489EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/06/19 12:0 a.m.1 views

WordPress plugin Avada 7.11.1 and security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.8AI score0.0022EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

WordPress Plugin Avada 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS8.2AI score0.0019EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.6 views

WordPress Plugin Avada 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS8.4AI score0.58179EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.1 views

WordPress Plugin Avada 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

7.7CVSS8.7AI score0.00437EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.1 views

WordPress Plugin Avada 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

8.8CVSS8.8AI score0.00656EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.1 views

WordPress plugin Avada | Website Builder For WordPress & WooCommerce Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS7.2AI score0.03612EPSS
Exploits0References3
Rows per page
Query Builder